Cisco Cisco Packet Data Gateway (PDG) Prospecto
Crypto Template IKEv2-Dynamic Payload Configuration Mode Commands
ip-address-allocation ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
2853
ip-address-allocation
Configures IP address allocation for subscribers using this crypto template payload. Configure two payloads per crypto
template. The first must have a dynamic address to assign a tunnel inner address (TIA) to the ChildSA. The second
payload is configured after a successful MAnaged IP (MIP) initiation and can use the default Home Address (HoA)
option.
template. The first must have a dynamic address to assign a tunnel inner address (TIA) to the ChildSA. The second
payload is configured after a successful MAnaged IP (MIP) initiation and can use the default Home Address (HoA)
option.
Product
All Security Gateway products
Privilege
Security Administrator
Mode
Exec > Global Configuration > Context Configuration > Crypto Template Configuration > Crypto Template IKEv2-
Dynamic Payload Configuration
Dynamic Payload Configuration
configure > context context_name > crypto template template_name ikev2-dynamic > payload
payload_name match childsa
payload_name match childsa
match
{ any | ipv4 | ipv6 }
Entering the above command sequence results in the following prompt:
[context_name]host_name(cfg-crypto-tmpl-ikev2-tunnel-payload)#
Syntax
ip-address-allocation { dynamic | home-address | }
default ip-address-allocation
ip-address-allocation dynamic
Specifies that the IP address for the subscriber is allocated from a dynamic IP pool.
ip-address-allocation home-address
The IP address for the subscriber is allocated by the Home Agent. This is the default setting for this
command.
command.
Usage
Use this command to configure how ChildSA payloads are allocated IP addresses for this crypto template.
Example
The following command is for the first ChildSA and will ensure that it gets a TIA address from an IP address
pool:
pool:
ip-address-allocation dynamic
The following command is for the second ChildSA and will ensure that it gets a HoA address from the HA:
default ip-address-allocation