Cisco Cisco ASR 5000
Crypto Template Configuration Mode Commands
▀ authentication
▄ Command Line Interface Reference, StarOS Release 18
3018
authentication
Configures the gateway and subscriber authentication methods to be used by this crypto template.
Product
All IPSec-related services
Privilege
Security Administrator
Syntax
authentication { eap-profile name [ second-phase eap-profile name ] | local { certificate
| pre-shared-key { encrypted key value | key clear_text } } | pre-shared-key { encrypted
key value | key clear_text [ second-phase eap-profile name ] } | remote { certificate |
eap-profile name [ second-phase eap-profile name ] | pre-shared-key { encrypted key
value | key clear_text [ second-phase eap-profile name ] } } }
| pre-shared-key { encrypted key value | key clear_text } } | pre-shared-key { encrypted
key value | key clear_text [ second-phase eap-profile name ] } | remote { certificate |
eap-profile name [ second-phase eap-profile name ] | pre-shared-key { encrypted key
value | key clear_text [ second-phase eap-profile name ] } } }
no authentication local { certificate | pre-shared-key }
default authentication
default
Returns the command to its default setting.
no
Removes the authentication parameters from the configuration.
eap-profile name [ second-phase eap-profile name ]
Specifies that authentication is to be performed using a named Extensible Authentication Protocol (EAP)
profile.
profile.
name
is an alphanumeric string of 1 through 127 characters. Entering this keyword places the CLI in
the EAP Authentication Configuration Mode.
The
The
second-phase eap-profile name
is only required for installations using multiple authentications.
name
must be an alphanumeric string of 1 through 127 characters.
local { certificate | pre-shared-key { encrypted key value | key clear_text }
Specifies the local authentication method required for services using the crypto template.
certificate
: Specifies that the certificate method of authentication must be used for services using the
crypto template.
pre-shared-key { encrypted key value | key clear_text }
: Specifies that a pre-shared key is
to be used for services using the crypto template.
encrypted key
value
configures an encrypted pre-
shared key used for authentication.
value
must be an alphanumeric string of 16 through 255 characters for
releases prior to 15.0, or 15 through 444 characters for release 15.0 and higher.
key clear_text
configures
a clear text pre-shared key used for authentication.
clear_text
must be an alphanumeric string of 1 through
255 characters.
pre-shared-key { encrypted key value | key clear_text }
Specifies that a pre-shared key is to be used for services using the crypto template.