CLI Reference Guide

Parameter
Description
IPsec tunnel using IKEv2.
master-mac1 <mac1>
The MAC address of the certificate on the Master.
master-mac2 <mac2>
(Optional) the MAC address of the certificate on the backup master controller.
interface
Specify the uplink or VLAN interface on the master controller to initiate IKE.
uplink
Use the master controller’s current active uplink to initiate IKE.
vlan <id>
Specify a VLAN interface on the master controller to initiate IKE. If you do not specify a
VLAN, the controller IP will be used.
fqdn <fqdn>
Identify a dynamically addressed local controller by entering the Fully Qualified Domain
Name (FQDN) of the controller.
Usage Guidelines
Use this command on a local controller to configure the IP address and preshared key or certificate for secure
communication with the master controller. On the master controller, use the localip command to configure the IP
address and preshared key or certificate for a local controller.
NOTE: Changing the IP address of the master on a local controller requires a reboot of the local controller
If your master and local controllers use a pre-shared key for authentication, they will create the IPsec tunnel using
IKEv1. If your master and local controllers use certificates for authentication, the IPsec tunnel will be created using
IKEv2.
Example
The following command configures the master controller with a pre-shared key:
(host) (config) #masterip 10.1.1.250 ipsec gw1234567
Command History
Release Modification
ArubaOS 3.0 Command introduced.
ArubaOS 6.1 The ipsec-factory-cert and ipsec-custom-cert parameters were introduced to allow
certificate-based authentication of master and local controllers.
Command Information
Platform License Command Mode
Available on all platforms The suite-b gcm-128 and suite-b gcm-256 encryption options
for IPsec custom certificates requires the Advanced
Cryptography (ACR) license. All other parameters are
available in the base operating system
Available in Config mode
on local controllers
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide masterip | 437