IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
762
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
Alcatel-Lucent
CRYPTO IKE KEY
crypto ike key <key-string> [vrf <name>] peer {<peer-
address>|<FQDN>}[force]
DESCRIPTION
This command is entered in the Configuration Mode. This command is used to
configure a pre-shared key. The key is same on both the IPsec gateways. It is
denoted in the form of a key-string. The peer can either be an IP address or fully
qualified domain name (FQDN) of the peer at the remote end.
DNS client configuration is prerequisite for configuring peer as FQDN. For FQDN
resolution, “ip domain-lookup” and “ip name-server” commands should be
configured. This name server should be reachable by the system.
PARAMETERS
DEFAULT VALUE
There is no default pre-shared authentication key.
PLATFORMS SUPPORTED
OmniAccess 5740 USG
EXAMPLE
ALU(config)# crypto ike key top_secret1612 peer 10.10.1.2
ALU(config)# crypto ike key "!netsecret!" peer 202.54.30.100
ALU(config)# crypto ike key secret1234 peer mysmb.dyndns.org
RELEASE HISTORY
Release 3.0: Parameter “FQDN” was introduced.
Parameter Description
key-string Denotes an alphanumeric unique key string. The
IKE key is given by means of a key-string and
supports both string and hex values. The IKE key
is given by means of a key-string. Currently, the
preshared-key length is restricted to 128
characters, and the minimum length is 8
characters.
vrf <name> Name of the VRF.
peer-address Peer address/ host name for identification.
FQDN Fully qualified domain name (FQDN) of the peer
at the remote end.
force Edits or modifies the IKE keys, which are already
configured.
To Next Page
Loading...
Need help?
General
