Enterasys Networks XSR CLI Router User Manual


 
Remote Peer ISAKMP Protocol Policy Mode Commands
XSR CLI Reference Guide 14-103
Syntax of the “no” Form
Thenoformofthiscommandremovespoliciesfromthepeer:
no proposal
Mode
RemotePeerISAKMPprotocolpolicyconfiguration:XSR(config-isakmp-peer)#
Example
Thefollowingexampleatta chesaproposaltotheremotepeer:
XSR(config)#crypto isakmp peer 192.168.57.9 255.255.255.255
XSR(config-isakmp-peer)#proposal 3des_md5_gh2
user-id
ThiscommanddefinestheidentityinformationtobeusedduringaggressiveIKEPhase1
negotiationforpeertopeerconnections.Enteritwhenconfiguringthepeer’sISAKMPforapeer
withpresharedkeyswhoseIPaddressisdynamic.IfyouspecifynoID,theIPaddresswillbeused
bydefault.But,inthatcase,youwillhavetoreconfigure(withanewentryintheaaa user
database)bothendsofthetunneleverytimetheaddresschanges.
Syntax
user-id “string”
Syntax of the “no” Form
Thenoformofthiscommanddeletestheuseridentity:
no user-id “string”
Mode
PrivilegedEXEC:XSR#
Example
ThefollowingexampleconfigurestheidentificationROBO1.ThisIDwillbeusedforaggressive
IKEPhase1messagessenttothepeermatchingtheISAKMP’speeraddress(0.0.0.0,forexample):
XSR(config)#crypto isakmp peer 0.0.0.0 0.0.0.0
XSR(config-isakmp-peer)#exchange-mode aggressive
XSR(config-isakmp-peer)#user-id “ROBO1 in Shrewsbury”
Note: The exchange mode for this ISAKMP must be set to aggressive.
“string”
Userdefinedidentificationenclosedbyquotations.