
Command Reference Guide IKE Policy Command Set
61950860L1-35D © 2003 ADTRAN, Inc. 261
local-id [address | fqdn | user-fqdn] <ipaddress or domain name>
Use the local-id command to set the local ID for the IKE policy. This setting overrides the system local ID
setting (set in the Global command set using the crypto ike local-id address command).
Syntax Description
address
<ipaddress> Specifies a remote ID of IPv4 type.
fqdn
<
domain name>
Specifies a fully qualified domain name (e.g., adtran.com) as the remote ID.
user-fqdn
<
domain name>
Specifies a user fully qualified domain name (e.g., user1@adtran.com) as the
remote ID.
Default Values
By default, local-id is not defined.
Command Modes
(config-ike)# IKE Policy Configuration Mode
Command History
Release 4.1 Command was introduced
Functional Notes
The local-id for a particular IKE policy can be set in two ways. The first (default) method is to use the global
system command:
(config)#
crypto ike local-id address
This command, which by default is executed on start-up, makes the local-id of an IKE policy equal to the IPv4
address of the interface on which an IKE negotiation is occurring. This is particularly useful for products that
could have multiple public interfaces.
The second method is to use the IKE policy command:
(config-ike)#
local-id [address | fqdn | user-fqdn]
<ipaddress or fqdn>
This policy-specific command allows you to manually set the local-id for an IKE policy on a per-policy basis.
You can use both methods simultaneously in the product. Several IKE policies can be created, some of which
use the default system setting of the IPv4 address of the public interface. Others can be set to override this
system setting and manually configure a local-id specific to those policies. When a new IKE policy is created,
they default to
no local-id
. This allows the system local-id setting to be applied to the policy.
Komentarze do niniejszej Instrukcji