Cisco Cisco Packet Data Interworking Function (PDIF)
HA Service Configuration Mode Commands
ikev1 ▀
Command Line Interface Reference, StarOS Release 18 ▄
6261
ikev1
Configures IPSec Internet Key Exchange (IKE) parameters.
Product
HA
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Context Configuration > HA Service Configuration
configure > context context_name > ha-service service_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-ha-service)#
Syntax
ikev1 { aaa-context aaa_context_string | peer-fa IPAddress crypto-map crypto_map_string
[ encrypted ] [ secret secret_string ] | skew-lifetime seconds }no ikev1 { aaa-context |
peer-fa IPAddress | skew-lifetime }
[ encrypted ] [ secret secret_string ] | skew-lifetime seconds }no ikev1 { aaa-context |
peer-fa IPAddress | skew-lifetime }
no
Disables IPSec IKE parameters.
aaa-context
aaa_context_string
Configures AAA context from which to retrieve IKE keys. Must be followed by the context name.
aaa_context_string
is an alphanumeric string of 1 through 63 characters.
peer-fa
IPAddress
Sets the IKE crypto-map for a peer Foreign Agent (FA).
IPAddress
is IP address entered using IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal notation.
crypto-map
crypto_map_string
Configures IKE crypto-map. Must be followed by the crypto-map name.
crypto_map_string
is an alphanumeric string of 1 through 63 characters.
encrypted
designates use of encryption
secret
secret_string
uses a secret that is shared between FA and HA.
secret_string
is an
alphanumeric string of 1 through 256 characters.
skew-lifetime
seconds
Configures the “S” lifetime Skew (in seconds).
seconds
is an integer from 1 through 65534. Default is 10.
Usage
Use this command to configure IPSec IKE parameters.
Example