Cisco Cisco IOS Software Release 12.4(2)XB6 Références techniques

Page de 230
 
90
Command Reference for Cisco PDSN Release 4.0 in IOS Release 12.4(15)XR
crypto map (global IPSec)
To enter crypto map configuration mode and create or modify a crypto map entry, to create a crypto 
profile that provides a template for configuration of dynamically created crypto maps, or to configure a 
client accounting list, use the crypto map command in global configuration mode. To delete a crypto 
map entry, profile, or set, use the no form of this command. 
crypto map map-name seq-num ipsec-manual
crypto map map-name seq-num ipsec-isakmp [dynamic dynamic-map-name] [discover] [profile 
profile-name
crypto map map-name [client-accounting-list aaalist
no crypto map map-name [seq-num]
Note
Issue the crypto map map-name seq-num command without a keyword to modify an existing 
crypto map entry.
Syntax Description
Defaults
No crypto maps exist.
Peer discovery is not enabled.
map name
The name you assign to the crypto map set
seq-num
The number you assign to the crypto map entry.
ipsec-manual
Indicates that IKE will not be used to establish the IPSec security associations 
for protecting the traffic specified by this crypto map entry.
ipsec-isakmp
Indicates that IKE will be used to establish the IPSec security associations for 
protecting the traffic specified by this crypto map entry.
dynamic
(Optional) Specifies that this crypto map entry is to reference a preexisting 
dynamic crypto map. Dynamic crypto maps are policy templates used in 
processing negotiation requests from a peer IPSec device. If you use this 
keyword, none of the crypto map configuration commands will be available.
dynamic-map-name
(Optional) Specifies the name of the dynamic crypto map set that should be 
used as the policy template.
discover
(Optional) Enables peer discovery. By default, peer discovery is not enabled.
profile
(Optional) Designates a crypto map as a configuration template. The security 
configurations of this crypto map will be cloned as new crypto maps are created 
dynamically on demand. 
profile-name
(Optional) Name of the crypto profile being created. 
client-accounting- 
list
(Optional) Designates a client accounting list. 
aaalist
(Optional) List name.