Send documentation comments to mdsfeedback-doc@cisco.com
2-19
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 2 A Commands
authentication
authentication
To configure the authentication method for an IKE protocol policy, use the authentication command in
IKE policy configuration submode. To revert to the default authentication method, use the no form of
the command.
authentication {pre-share | rsa-sig}
no authentication {pre-share | rsa-sig}
Syntax Description
Defaults Preshared key.
Command Modes IKE policy configuration submode.
Command History
Usage Guidelines To use this command, enable the IKE protocol using the crypto ike enable command. In addition, you
must configure the identity authentication mode using the fully qualified domain name (FQDN) before
you can use RSA signatures for authentication. Use the identity hostname command for this purpose.
Examples The following example shows how to configure the authentication method using the preshared key.
switch# config terminal
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# policy 1
switch(config-ike-ipsec-policy)# authentication pre-share
The following example shows how to configure the authentication method using the RSA signatures.
switch(config-ike-ipsec-policy)# authentication rsa-sig
The following example shows how to revert to the default authentication method (preshared key).
switch(config-ike-ipsec-policy)# no authentication rsa-sig
pre-share Configures the preshared key as the authentication method.
rsa-sig Configures RSA signatures as the authentication method.
Release Modification
3.0(1) This command was introduced.