Reference Guide

Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide crypto dynamic-map | 158
crypto dynamic-map
crypto dynamic-map <name> <priority>
no ...
set puffs {group1|group2}
set security-association lifetime seconds <seconds>
set transform-set <name1> [<name2>] [<name3>] [<name4>]
Description
This command configures a new or existing dynamic map.
Syntax
Usage Guidelines
Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a
dynamic map, you can associate that map with the default global map using the command crypto map global-
map.
Example
The following command configures a dynamic map:
Command History
This command was introduced in ArubaOS 3.0.
Command Information
Parameter Description Range Default
<name> Name of the map. — —
<priority> Priority of the map. 1-10000 10000
no Negates a configured parameter. — —
pfs Enables Perfect Forward Secrecy (PFS) mode. Use one of
the following:
group1: 768-bit Diffie Hellman prime modulus group
group2: 1024-bit Diffie Hellman prime modulus group
group1/
group2
disabled
seconds Configures the lifetime, in seconds, for the security
association (SA).
300-86400 no limit
transform-set Name of the transform set for this dynamic map. You can
specify up to four transform sets. You configure transform
sets with the crypto ipsec transform-set command.
— default-transform
Platforms Licensing Command Mode
All platforms Base OS Config mode on master controllers
(host) (config)# crypto dynamic-map dmap1 100
set pfs group2
set security-association lifetime seconds 300