In this section:
This section details the commands to configure an IPsec Peer. See IPsec for Signaling for in-depth feature description.
// Mandatory parameters required to configure the IPsec.
% set addressContext <addressContext name> ipsec peer <peer name> ipAddress <ipAddress> localIdentity <fqdn | ipV4Addr | ipV6Addr> preSharedKey <DES3 encrypted string>
// Optional parameters:
% set addressContext <addressContext name> ipsec peer <peer name> protectionProfile <profile_name> protocol <any | ikev1 | ikev2> remoteIdentity <fqdn | ipV4Addr | ipV6Addr>
The following example creates an IPsec peer named "peer2
":
% set addressContext default ipsec peer peer2 ipAddress 10.20.30.140 preSharedKey 12345678 localIdentity type ipV4Addr ipAddress 10.20.30.134 % show addressContext default ipsec peer peer2 { ipAddress 10.20.30.140; localIdentity { type ipV4Addr; ipAddress 10.20.30.134; } preSharedKey $3$jCFw27QxeFA9KSe4Ym01FechIP3sXsZY;