To navigate to the remote VPN client configuration instance, use the following command:
In the device-config mode: <DEVICE>(config-device-<DEVICE-MAC>)#crypto map <CRYPTO-MAP-TAG> <1-1000> ipsec-isakmp {dynamic} In the profile-config mode: <DEVICE>(config-profile-<PROFILE-NAME>)#crypto map <CRYPTO-MAP-TAG> <1-1000> ipsec-isakmp {dynamic} nx9500-6C8809(config-device-B4-C7-99-6C-88-09)#crypto map test2 2 ipsec-isakmp d ynamic nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test2#2)#? Dynamic Crypto Map Configuration commands: local-endpoint-ip Use this IP as local tunnel endpoint address, instead of the interface IP (Advanced Configuration) modeconfig Set the mode config method no Negate a command or set its defaults peer Add a remote peer pfs Specify Perfect Forward Secrecy remote-type Set the remote VPN client type security-association Security association parameters transform-set Specify IPSec transform(s) to use use Set setting to use clrscr Clears the display screen commit Commit all changes made in this session do Run commands from Exec mode end End current mode and change to EXEC mode exit End current mode and down to previous mode help Description of the interactive help system revert Revert changes service Service Commands show Show running system information write Write running configuration to memory or terminal nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test2#2)#
The following table lists this configuration mode commands:
Command | Description |
---|---|
ip | Enables this setting to utilize IP/Port NAT on the VPN tunnel. This command is applicable only to the site-to-site VPN tunnel. |
local-endpoint-ip | Uses the configured IP as local tunnel endpoint address, instead of the interface IP. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
modeconfig | Configures the mode config method (pull or push) associated with the remote VPN client. This command is applicable only to the remote VPN client. |
peer | Configures the IKEv1 or IKEv2 peer for the VPN tunnel. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
pfs | Configures the Perfect Forward Secrecy (PFS) for the VPN tunnel. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
remote-type | Configures the remote VPN client type as either None or XAuth. This command is applicable only to the remote VPN client. |
security-association | Defines this automatic VPN tunnel‘s IPSec SA settings. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
transform-set | Applies a transform set (encryption and hash algorithms) to the VPN tunnel. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
use | Applies an existing and configured IP access list to the VPN tunnel. This command is applicable to the site-to-site VPN tunnel and remote VPN client. |
no (crypto-map-ipsec-isakmp) | Removes or reverts site-to-site VPN tunnel or remote VPN client settings |