Cisco Cisco ASR 5000

 

▄  Command Line Interface Reference, StarOS Release 18 

Configures parameters for the IKEv2 IKE Security Associations within this crypto template. 

 

ePDG 

FA 

GGSN 

HA 

HeNBGW 

HNBGW 

HSGW 

MME 

P-GW 

PDSN 

S-GW 

SAEGW 

SCM 

SecGW 

SGSN 

 

Security Administrator 

 

ikev2-ikesa { allow-empty-ikesa | max-retransmissions number | policy { error-
notification [ invalid-major-version ] [ invalid-message-id [ invalid-major-version | 
invalid-syntax ] ] | invalid-syntax [ invalid-major-version ] | use-rfc5996-notification 
} | rekey [ disallow-param-change ] | retransmission-timeout msec [ exponential ] | 
setup-timer sec | transform-set list name1 name2 name3 name4 name5 name6  } 

default ikev2-ikesa { allow-empty-ikesa | max-retransmissions | policy error-notification 
| rekey [ disallow-param-change ] | setup-timer } 

no ikev2-ikesa { allow-empty-ikesa name | policy { error-notification | use-rfc5996-
notification } | rekey sec | transform-set list } 

 

Disables a previously enabled parameter. 

 

Default is not to allow-empty-ikesa. Activate to have the IKEv2 stack keep the IKE SA when all the Child 
SAs have been deleted.