Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 635

Advertising
background image

622

Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

7

The following table lists the IPSec manual VPN tunnel configuration commands:

local-endpoint-ip

crypto-map-ipsec-manual-instance

Uses the configured IP as local tunnel endpoint address, instead of the interface IP (Advanced
Configuration)

Supported in the following platforms:

Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point

Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000

Service Platforms — Brocade Mobility RFS9510

Syntax:

local-endpoint-ip <IP>

Parameters

local-endpoint-ip <IP>

Example

rfs7000-37FABE(config-profile-default-rfs7000-cryptomap-map1#1)#local-endpoin

t-ip 172.16.10.3

mode

crypto-map-ipsec-manual-instance

Sets the crypto map tunnel mode

Supported in the following platforms:

Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point

Command

Description

Reference

local-endpoint-ip

Uses the configured IP as local tunnel endpoint address, instead of the interface IP (Advanced
Configuration)

page 7-622

mode

Sets the tunnel mode

page 622

peer

Sets the peer device’s IP address

page 7-623

security-association

Defines the lifetime (in kilobytes and/or seconds) of IPSec SAs created by a crypto map

page 7-624

session-key

Defines encryption and authentication keys for a crypto map

page 7-624

use

Uses the configured IP access list

page 7-626

no

Negates a command or sets its default

page 7-626

local-endpoint-ip <IP>

Uses the configured IP as local tunnel’s endpoint address

<IP> – Specify the IP address. The specified IP address must be available on the interface.

Advertising