Cisco Cisco Packet Data Gateway (PDG)
IKEv2 RFC 5996 Compliance
CLI Commands ▀
IPSec Reference, StarOS Release 16 ▄
159
certificate name
pem url url
cert-enc cert-hash-url url <url> url
For a crypto template the configuration sequence is:
configure
context <ctxt_name>
crypto template template_name ikev2-dynamic
pem url url
cert-enc cert-hash-url url <url> url
Refer to the Command Line Interface Reference for a complete description of these commands and their keywords.
Enable Hash and URL Certificate Encoding
Hash and URL encoding must be enabled in a crypto map or crypto template.
For a crypto map the configuration sequence is:
configure
context <ctxt_name>
crypto map template_name { ikev2-ipv4 | ikev2-ipv6 }
allow-cert-enc cert-hash-url
For a crypto template the configuration sequence is:
configure
context <ctxt_name>
crypto template template_name ikev2-dynamic
allow-cert-enc cert-hash-url
Refer to the Command Line Interface Reference for a complete description of these commands and their keywords.
Disable Change in Rekey Parameters in CHILDSA REKEY
Disabling of rekey parameters must be enabled in a crypto map or crypto template.
For a crypto map the configuration sequence is:
configure
context <ctxt_name>
crypto map template_name { ikev2-ipv4 | ikev2-ipv6 }