Cisco Cisco IOS Software Release 12.4(2)XB6 Références techniques
90
Command Reference for Cisco PDSN Release 4.0 in IOS Release 12.4(15)XR
crypto map (global IPSec)
To enter crypto map configuration mode and create or modify a crypto map entry, to create a crypto
profile that provides a template for configuration of dynamically created crypto maps, or to configure a
client accounting list, use the crypto map command in global configuration mode. To delete a crypto
map entry, profile, or set, use the no form of this command.
profile that provides a template for configuration of dynamically created crypto maps, or to configure a
client accounting list, use the crypto map command in global configuration mode. To delete a crypto
map entry, profile, or set, use the no form of this command.
crypto map map-name seq-num ipsec-manual
crypto map map-name seq-num ipsec-isakmp [dynamic dynamic-map-name] [discover] [profile
profile-name]
crypto map map-name [client-accounting-list aaalist]
no crypto map map-name [seq-num]
Note
Issue the crypto map map-name seq-num command without a keyword to modify an existing
crypto map entry.
crypto map entry.
Syntax Description
Defaults
No crypto maps exist.
Peer discovery is not enabled.
map name
The name you assign to the crypto map set
seq-num
The number you assign to the crypto map entry.
ipsec-manual
Indicates that IKE will not be used to establish the IPSec security associations
for protecting the traffic specified by this crypto map entry.
for protecting the traffic specified by this crypto map entry.
ipsec-isakmp
Indicates that IKE will be used to establish the IPSec security associations for
protecting the traffic specified by this crypto map entry.
protecting the traffic specified by this crypto map entry.
dynamic
(Optional) Specifies that this crypto map entry is to reference a preexisting
dynamic crypto map. Dynamic crypto maps are policy templates used in
processing negotiation requests from a peer IPSec device. If you use this
keyword, none of the crypto map configuration commands will be available.
dynamic crypto map. Dynamic crypto maps are policy templates used in
processing negotiation requests from a peer IPSec device. If you use this
keyword, none of the crypto map configuration commands will be available.
dynamic-map-name
(Optional) Specifies the name of the dynamic crypto map set that should be
used as the policy template.
used as the policy template.
discover
(Optional) Enables peer discovery. By default, peer discovery is not enabled.
profile
(Optional) Designates a crypto map as a configuration template. The security
configurations of this crypto map will be cloned as new crypto maps are created
dynamically on demand.
configurations of this crypto map will be cloned as new crypto maps are created
dynamically on demand.
profile-name
(Optional) Name of the crypto profile being created.
client-accounting-
list
list
(Optional) Designates a client accounting list.
aaalist
(Optional) List name.