Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 603)

590 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
7
groupid <WORD> [psk [0 <WORD>|2 <WORD>|<WORD>]|rsa]
NOTE
Only one group ID is supported on the controller or service platform. All APs, controllers, and service
platform must use the same group ID.
Example
rfs7000-37FABE(config-profile-default-rfs7000-crypto-auto-ipsec-secure)#group
id
motorolasolutions@123 rsa
rfs7000-37FABE(config-profile-default-rfs7000-crypto-auto-ipsec-secure)#show
context
crypto auto-ipsec-secure
groupid motorolasolutions@123 rsa
rfs7000-37FABE(config-profile-default-rfs7000-crypto-auto-ipsec-secure)#
ip
crypto-auto-ipsec-tunnel commands
Enables the controller to uniquely identify APs and the hosts present in the AP’s subnet. This allows
the controller to correctly identify the destination host and create a dynamic site-to-site VPN tunnel
between the host and the private network behind the controller.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
ip nat crypto
Parameters
<WORD> Specify a string up to 64 characters. This is the group identity used for IKE exchange for auto IPSec secure
peers. After providing a group ID, specify the authentication method used to authenticate peers on the auto
IPSec secure tunnel. The options are: psk and rsa.
psk
[0 <WORD>|2
<WORD>|<WORD>] Configures the pre-shared key
•
0 <WORD> – Enter a clear text key
•
2 <WORD> – Enter an encrypted key
•
<WORD> – Specify a string value from 8 - 21 characters.
rsa Configures the Rivest-Shamir-Adleman (RSA) key.
RSA is an algorithm for public key cryptography. It is the first algorithm known to be suitable for signing, as well
as encryption. This is the default setting.