для Cisco Cisco Packet Data Gateway (PDG)
Crypto Template IKEv2-Dynamic Payload Configuration Mode Commands
ip-address-allocation ▀
Command Line Interface Reference, StarOS Release 18 ▄
3057
ip-address-allocation
Configures IP address allocation for subscribers using this crypto template payload. Configure two payloads per crypto
template. The first must have a dynamic address to assign a tunnel inner address (TIA) to the ChildSA. The second
payload is configured after a successful MAnaged IP (MIP) initiation and can use the default Home Address (HoA)
option.
template. The first must have a dynamic address to assign a tunnel inner address (TIA) to the ChildSA. The second
payload is configured after a successful MAnaged IP (MIP) initiation and can use the default Home Address (HoA)
option.
Product
All Security Gateway products
Privilege
Security Administrator
Mode
Exec > Global Configuration > Context Configuration > Crypto Template Configuration > Crypto Template IKEv2-
Dynamic Payload Configuration
Dynamic Payload Configuration
configure > context context_name > crypto template template_name ikev2-dynamic > payload
payload_name match childsa
payload_name match childsa
match
{ any | ipv4 | ipv6 }
Entering the above command sequence results in the following prompt:
[context_name]host_name(cfg-crypto-tmpl-ikev2-tunnel-payload)#
Syntax
ip-address-allocation { dynamic | home-address }
default ip-address-allocation
default
Sets IP address allocation to the home-address.
ip-address-allocation dynamic
Specifies that the IP address for the subscriber is allocated from a dynamic IP pool.
ip-address-allocation home-address
The IP address for the subscriber is allocated by the Home Agent. This is the default setting for this
command.
command.
Usage
Use this command to configure how ChildSA payloads are allocated IP addresses for this crypto template.
Example
The following command is for the first ChildSA and will ensure that it gets a TIA address from an IP address
pool:
pool:
ip-address-allocation dynamic
The following command is for the second ChildSA and will ensure that it gets a HoA address from the HA:
default ip-address-allocation