Cisco Cisco ASR 5000
Crypto Template Configuration Mode Commands
▀ peer network
▄ Command Line Interface Reference, StarOS Release 18
3048
peer network
Configures a list of allowed peer addresses on this crypto template.
Product
All IPSec-related services
Privilege
Security Administrator
Syntax
peer network ip_address /mask [ encrypted pre-shared-key encrypt_key | pre-shared-key key
]
]
no peer network ip_address/ mask
no
Removes the specified peer network IP address from this crypto template.
peer network
ip_address
[ /mask
]
Specifies the IP address of the peer network in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal
notation.
notation.
/mask
specifies the subnet mask bits.
mask
is an integer value from 1 to 32 for IPv4 addresses and 1 to 128
for IPv6 addresses (CIDR notation).
encrypted pre-shared-key
encrypt_key
Specifies that an encrypted pre-shared key is to be used for IPSec authentication for the address range.
encrypt_key
must be an alphanumeric string or hexadecimal sequence from 16 to 212.
pre-shared-key
key
Specifies that a clear text pre-shared key is to be used for IPSec authentication for the address range.
key
must be an alphanumeric string or hexadecimal sequence from 1 to 32.
Usage
Use this command to configure a list or range of allowed peer network IP addresses for this template.
Example
The following command configures a set of IP addresses with starting address of 10.2.3.4 and a bit mask of 8:
peer network 10.2.3.4/8