Cisco Cisco ASR 5000
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
Crypto Template Configuration Mode Commands
allow-custom-fqdn-idr ▀
Command Line Interface Reference, StarOS Release 18 ▄
3017
allow-custom-fqdn-idr
Allows non-standard FQDN (Fully Qualified Domain Name) strings in the IDr (Identification - Responder) payload of
IKE_AUTH messages received from the UE with the payload type as FQDN.
IKE_AUTH messages received from the UE with the payload type as FQDN.
Product
All services using IKEv2 IPSec
Privilege
Security Administrator
Syntax
[ default | no ] allow-custom-fqdn-idr
no
Does not allow non-standard FQDN strings in the IDr payload of IKE_AUTH messages received from the
UE with the payload type as FQDN.
UE with the payload type as FQDN.
default
Restores the default setting, which does not allow non-standard FQDN strings in the IDr payload of
IKE_AUTH messages received from the UE with the payload type as FQDN.
You can chain multiple CA-CRLs in a single command instance.
IKE_AUTH messages received from the UE with the payload type as FQDN.
You can chain multiple CA-CRLs in a single command instance.
Usage
Use this command to configure the system to skip the syntax check for the IDr payload in IKE_AUTH
messages received from the UE with the payload type as FQDN. This allows non-standard FQDN strings
such as APN names in the IDr payload.
messages received from the UE with the payload type as FQDN. This allows non-standard FQDN strings
such as APN names in the IDr payload.
Example
The following command configures the system to allow non-standard FQDN strings in the IDr payload of
IKE_AUTH messages received from the UE with the payload type as FQDN:
IKE_AUTH messages received from the UE with the payload type as FQDN:
allow-custom-fqdn-idr