HP Cisco MDS 9216A Cisco MDS 9000 Family Fabric Manager Configuration Guide, R - Page 880

Crypto IPv4-ACLs Chapter 44 Configuring IPsec Network Security Send documentation comments to [email protected] Figure 44-22 Existing Crypto Maps Step 3 Optionally, click Create Row to create a crypto map entry. You see the Create Crypto Map dialog box shown in Figure 44-23. Figure 44-23 Create Crypto Map Dialog Box Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Select the switch that you want to configure or modify. If you are creating a crypto map, set the setName and priority for this crypto map. Select the IPv4-ACL Profile and TransformSetIdList from the drop-down list for this crypto map. Optionally, check the AutoPeer check box or set the peer address if you are creating a crypto map. See the "About the AutoPeer Option" section on page 44-32. Choose the appropriate PFS selection. See the "About Perfect Forward Secrecy" section on page 44-34. Supply the Lifetime and LifeSize. See the "About SA Lifetime Negotiation" section on page 44-30. Click Create if you are creating a crypto map, or click Apply Changes if you are modifying an existing crypto map. About SA Lifetime Negotiation You can override the global lifetime values (size and time) by configuring an SA-specific lifetime value. 44-30 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x