Chapter5InternetKeySwitchingProtocolCommands
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�IftheISAKMPnegotiationtypeisID_FQDNandpeerFQDN
congurationpre-sharekeyauthenticationisadopted,ISAKMP
negotiationexchangemodemustbeaggressive.Ifthemode
isconguredasmain,thenthenegotiationwillfail.
ExampleThisexampledescribeshowtosetIKEnegotiationmodeonthe
routerR1.
ZXR10(config)#isakmpexchange-modemainaddress
1.1.1.66netmask255.255.255.0
ZXR10(config)#showisakmpexchange-mode
AddressMaskExchange-mode
1.1.1.0255.255.255.0main
ZXR10(config)#noisakmpexchange-modemainaddress
1.1.1.66netmask255.255.255.0
Related
Commands
showisakmpexchange-mode
isakmpidentity
PurposeUsethiscommandtodesignatetheIKEnegotiationidentitytype.
CommandModesGlobalconguration
Syntaxisakmpidentity{address|hostname}
noisakmpidentity
Syntax
Description
addressSetstheIKEnegotiationidentitytypeto
address
hostnameSetstheIKEnegotiationidentitytypeto
hostname
DefaultsTheIKEnegotiationidentitytypeisaddressbydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�TheidentitytypehostnameactuallyadoptsID_FQDN,host-
name.Theidentitytypesofthenegotiationpeersmustbethe
same.Iftheyaredifferent,theISAKMPnegotiationfails.
ExampleThisexampledescribeshowtosettheIKEnegotiationidentitytype
onrouterR1.
ZXR10(config)#isakmpidentityhostname
ZXR10(config)#isakmpidentityaddress
ZXR10(config)#showisakmpidentity
Isakmplocalidentitytype:address
ZXR10(config)#noisakmpidentity
Related
Commands
isakmpidentity
showIsakmpidentity
CondentialandProprietaryInformationofZTECORPORATION57