HP 7000 dl Router manual Crypto ike remote-id, Asn1-dn name

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

crypto ike remote-id

Use the crypto ike remote-idcommand to specify the remote ID and to associate a pre-shared key with the remote ID.

Note	For VPN configuration example scripts, refer to the technical support note VPN
	Configuration Guide located on the ProCurve SROS Documentation CD provided with
	your unit.

Syntax Description

address <IPv4 address>	Specifies a remote ID of IPv4 type.
any	Wildcard that allows any remote ID (type and value).
asn1-dn <name>	Specifies an Abstract Syntax Notation Distinguished Name as the
	remote ID (enter this value in LDAP format).
fqdn <fqdn>	Specifies a fully qualified domain name as the remote ID.
user-fqdn <fqdn>	Specifies a user fully qualified domain name or email address as
	the remote ID.
preshared-key <keyname>	Associates a pre-shared key with this remote ID.
no-mode-config	Optional keyword used to specify that the peer matching this
	remote ID should not use mode config.
no-xauth	Optional keyword used to specify that the peer matching this
	remote ID should not use xauth.

nat-t [v1 l v2] [allow l force I disable] Optional keyword that denotes whether peers matching this remote ID should allow, disable, or force NAT traversal versions 1 and 2.

Default Values

There are no default settings for this command.

Command Modes

(config)# Global Configuration Mode

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 227