Cisco Cisco Packet Data Interworking Function (PDIF) Prospecto
Crypto Template Configuration Mode Commands
▀ peer network
▄ Cisco ASR 5x00 Command Line Interface Reference
2842
peer network
Configures a list of allowed peer addresses on this crypto template.
Product
All IPSec-related services
Privilege
Security Administrator
Syntax
peer network ip_address {/mask | mask ip_mask } [ encrypted pre-shared-key key | pre-
shared-key key ]
shared-key key ]
no peer network ip_address mask ip_mask
no
Removes the specified peer network IP address from this crypto template.
peer network ip_address {/mask | mask ip_mask }
Specifies the IP address of the peer network in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal
notation.
notation.
/mask
specifies the subnet mask bits.
mask
must be and integer value from 1 to 32 for IPv4 addresses and 1
to 128 for IPv6 addresses (CIDR notation).
mask
ip_mask
specifies the subnet mask in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal
notations.
[ encrypted pre-shared-key key | pre-shared-key key ]
encrypted preshared key key
: Specifies that an encrypted pre-shared key is to be used for IPSec
authentication for the address range.
key
must be an alphanumeric string or hexadecimal sequence from 16 to
64.
preshared key key
: Specifies that a clear text pre-shared key is to be used for IPSec authentication for the
address range.
key
must be an alphanumeric string or hexadecimal sequence from 1 to 32.
Usage
Use this command to configure a list or range of allowed peer network IP addresses for this template.
Example
The following command configures a set of IP addresses with starting address of
10.2.3.4
and a bit mask of
8
:
peer network 10.2.3.4/8