HP Cisco MDS 9222i Cisco MDS 9000 Family Fabric Manager Configuration Guide, R - Page 882

Crypto IPv4-ACLs Chapter 44 Configuring IPsec Network Security Send documentation comments to [email protected] You see more columns shown in Figure 44-26. Figure 44-26 Existing Crypto Maps - Rightmost Columns Step 4 Step 5 Double-click and modify the value in the Life Time(sec) column. Click Apply Changes to save your changes. About the AutoPeer Option Setting the peer address as AutoPeer in the crypto map indicates that the destination endpoint of the traffic should be used as the peer address for the SA. Using the same crypto map, a unique SA can be set up at each of the endpoints in the subnet specified by the crypto map's IPv4-ACL entry. Auto-peer simplifies configuration when traffic endpoints are IPsec capable. It is particularly useful for iSCSI, where the iSCSI hosts in the same subnet do not require separate configuration. Figure 44-27 shows a scenario where the auto-peer option can simplify configuration. Using the auto-peer option, only one crypto map entry is needed for all the hosts from subnet X to set up SAs with the switch. Each host will set up its own SA, but will share the crypto map entry. Without the auto-peer option, each host needs one crypto map entry. 44-32 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x