HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 139

Chapter 2 A Commands authentication Send documentation comments to [email protected] authentication To configure the authentication method for an IKE protocol policy, use the authentication command in IKE policy configuration submode. To revert to the default authentication method, use the no form of the command. authentication {pre-share | rsa-sig} no authentication {pre-share | rsa-sig} Syntax Description pre-share rsa-sig Configures the preshared key as the authentication method. Configures RSA signatures as the authentication method. Defaults Preshared key. Command Modes IKE policy configuration submode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines To use this command, enable the IKE protocol using the crypto ike enable command. In addition, you must configure the identity authentication mode using the fully qualified domain name (FQDN) before you can use RSA signatures for authentication. Use the identity hostname command for this purpose. Examples The following example shows how to configure the authentication method using the preshared key. switch# config terminal switch(config)# crypto ike domain ipsec switch(config-ike-ipsec)# policy 1 switch(config-ike-ipsec-policy)# authentication pre-share The following example shows how to configure the authentication method using the RSA signatures. switch(config-ike-ipsec-policy)# authentication rsa-sig The following example shows how to revert to the default authentication method (preshared key). switch(config-ike-ipsec-policy)# no authentication rsa-sig OL-16217-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family Command Reference 2-19