Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 642)

Brocade Mobility RFS Controller CLI Reference Guide 629
53-1003098-01
7
IKEv2 uses an initial handshake in which VPN peers negotiate cryptographic algorithms, mutually
authenticate, and establish a session key, creating an IKE-SA. Additionally, a first IPsec SA is
established during the initial SA creation. All IKEv2 messages are request/response pairs. It is the
responsibility of the side sending the request to retransmit if it does not receive a timely response.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
peer <1-3> ikev2
Parameters
peer <1-3> ikev2
Example
rfs4000-229D58(config-profile-testBrocade Mobility
RFS4000-crypto-ikev2-remote-vpn-client)#peer
1 ikev2 ikev2Peer1
rfs4000-229D58(config-profile-testBrocade Mobility
RFS4000-crypto-ikev2-remote-vpn-client)#peer 2
ikev2 ikev2Peer2
rfs4000-229D58(config-profile-testBrocade Mobility
RFS4000-crypto-ikev2-remote-vpn-client)#show context
crypto remote-vpn-client
peer 1 ikev2 ikev2Peer1
peer 2 ikev2 ikev2Peer2
rfs4000-229D58(config-profile-testBrocade Mobility
RFS4000-crypto-ikev2-remote-vpn-client)#
shutdown
crypto-remote-vpn-client commands
Disables remote-vpn-client on this profile or device. Remote VPN client feature is disabled by
default.
To enable remote VPN client, use the no > shutdown command.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
peer <1-3> Adds a IKEv2 peer. You can add multiple peers to achieve redundancy
•
<1-3> – Specify a priority level for the peer from 1 - 3 (1 = primary, 2 and 3 = redundant).
ikev2
Specifies a name for this IKEv2 peer.