Command:  

crypto isakmp identity


Mode:

Router(config)#


Syntax:

crypto isakmp identity { address| hostname}

 

no crypto isakmp identity


Syntax Description:

address

Sets the ISAKMP identity to the IP address of the interface that is used to communicate to the remote peer during IKE negotiations. (By default, a peer's ISAKMP identity is the peer's IP address.)

hostname

Sets the ISAKMP identity to the host name concatenated with the domain name (for example, myhost.example.com).

 

Command Description:

To define the identity used by the router when participating in the Internet Key Exchange protocol, use the crypto isakmp identityglobal configuration command. Set an Internet Security Association Key Management Protocol identity whenever you specify preshared keys. To reset the ISAKMP identity to the default value (address), use the noform of this command.


Example:

The following example uses preshared keys at two peers and sets both their ISAKMP identities to IP address. At the local peer "LocalRouter" (at 10.0.0.1) the ISAKMP identity is set and the preshared key is specified.


LocalRouter(config)#crypto isakmp identity address
LocalRouter(config)#crypto isakmp key sharedkeystring address 192.168.1.33

At the remote peer "RemoteRouter" (at 192.168.1.33) the ISAKMP identity is set and the same preshared key is specified.


RemoteRouter(config)#crypto isakmp identity address
RemoteRouter(config)#crypto isakmp key sharedkey string address 10.0.0.1

At the local peer (at 10.0.0.1) the ISAKMP identity is set and the preshared key is specified.

crypto isakmp identity address

crypto isakmp key sharedkeystring address 192.168.1.33

At the remote peer (at 192.168.1.33) the ISAKMP identity is set and the same preshared key is specified.

crypto isakmp identity address

crypto isakmp key sharedkeystring address 10.0.0.1

 

Misconceptions:

None


Related commands:

 

crypto isakmp key


© Cisco Systems, Inc. 2001, 2002
World Wide Education











Converted from CHM to HTML with chm2web Pro 2.85 (unicode)