local-endpoint-ip

Uses the configured IP as local tunnel endpoint address, instead of the interface IP

Supported on the following devices:

Access Points: AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

local-endpoint-ip <IP>

Parameters

local-endpoint-ip <IP>


local-endpoint-ip <IP>	Configures the local VPN tunnel‘s (site-to-site VPN tunnel or remote VPN client) endpoint IP address <IP> – Specify the IP address. The specified IP address must be available on the interface.

Example

Site-to-site VPN tunnel:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#local-endpoint-ip 192.168.13.10

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#show context
 crypto map test 1 ipsec-isakmp
  local-endpoint-ip 192.168.13.10
  ip nat crypto
nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#1)#

Remote VPN client:

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#local-endpoint-ip 157.235.204.62

nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#show context
 crypto map test 2 ipsec-isakmp dynamic
  local-endpoint-ip 157.235.204.62
nx9500-6C8809(config-device-B4-C7-99-6C-88-09-cryptomap-test#2)#