Chapter6IPSecIPv4NetworkSafecommands
Syntaxmatchaddress{<acl-list-number>|<acl-name>}
nomatch
Syntax
Description
<acl-name>Extendedaccesslistname
<acl-list-number>Extendedaccesslistnumber
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�Thepolicymusthavebeencreatedbeforethiscommandis
used.Thecommandsupportshierarchiccongurationunder
themap.
ExampleThisexampledescribedhowtocreateanIPSecsecuritypolicy
namedmymapandcongureanaccesslistforthepolicy.
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#matchaddress1888
ZXR10(config-crypto-map)#nomatch
ZXR10(config-crypto-map)#matchaddressabc
ZXR10(config-crypto-map)#nomatch
Related
Commands
cryptomap
matchaddress
setpeer
setpfs
setpfslevel
setsalifetime
settransform-set
setpeer
PurposeUsethiscommandtodesignateordeletethepeeraddressforsome
policy.
CommandModesDynamicsecuritycongurationandIKEsecurityconguration
Syntaxsetpeer{<ip-address>|<hostname>}
nosetpeer{<ip-address>|<hostname>}
Syntax
Description
<ip-address>PeerIPaddress
<hostname>Peerhostname,lessthan16characters
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�Thepolicymusthavebeencreatedbeforetheuseofthiscom-
mand.Thiscommandcannotbeusedforthedynamicmap.
CondentialandProprietaryInformationofZTECORPORATION75