Cisco Cisco IOS Software Release 12.4(15)XM Referências técnicas

To create or modify a crypto map entry and enter the crypto map configuration mode, use the crypto 
map global configuration command. To delete a crypto map entry or set, use the no form of this 
command.

crypto map map-name seq-num ipsec-manual

crypto map map-name seq-num ipsec-isakmp [dynamic dynamic-map-name] [discover]

no crypto map map-name [seq-num]

Global configuration.

Issue the crypto map map-name seq-num command without a keyword to modify an existing crypto map 
entry.

The following example creates a crypto map entry and indicates that IKE will not be used to establish 
the IPSec security associations for protecting the traffic:

Router# crypto map map-name seq-num ipsec-manual

The name you assign to the crypto map set

The number you assign to the crypto map entry.

Indicates that IKE will not be used to establish the IPSec security associations 
for protecting the traffic specified by this crypto map entry.

Indicates that IKE will be used to establish the IPSec security associations for 
protecting the traffic specified by this crypto map entry.

(Optional) Specifies that this crypto map entry is to reference a preexisting 
dynamic crypto map. Dynamic crypto maps are policy templates used in 
processing negotiation requests from a peer IPSec device. If you use this 
keyword, none of the crypto map configuration commands will be available.

(Optional) Specifies the name of the dynamic crypto map set that should be 
used as the policy template.

(Optional) Enables peer discovery. By default, peer discovery is not enabled.

12.1(1)T

This command was introduced.