HP 7000 dl Router manual Client authentication host

SROS Command Line Interface Reference Guide IKE Policy Command Set

client authentication host

Use the client authentication host command to enable the unit to act as an Xauth host when this IKE policy is negotiated with a peer.

Variations of this command include the following:

client authentication host username <username>

client authentication host username <username> password <word>

client authentication host username <username> password <word> passphrase <phrase>

Syntax Description

username <username> Enter the value sent via Xauth as the username.

password <word> Enter the value sent via Xauth as the password.

passphrase <phrase> Optional. Enter the value sent via Xauth as the passphrase. This is only used with authentication type OTP (one time password).

Default Values

By default, if this command is not present in the IKE policy the unit does not act as an Xauth host.

Command Modes

(config-ike)# IKE Policy Configuration Mode

Functional Notes

The specified credentials are programmed into the unit and there is no prompt for entering values real time. Therefore, schemes requiring real time input or additional responses (e.g., SecureID) are not supported. The client authentication host command and the client authentication server commands are mutually exclusive. See client authentication server list <listname> on page 377 for more information.

Usage Examples

The following example specifies the login credentials to be sent:

(config-ike)#client authentication host username jsmith password password1 passphrase phrase

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 375