Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide masterip | 389
Syntax
Usage Guidelines
Use this command on a local controller to configure the IP address and preshared key or certificate for secure
communication with the master controller. On the master controller, use the localip command to configure the
IP address and preshared key or certificate for a local controller.
Parameter Description
<ipaddr> IP address of the master controller.
ipsec <key> To establish the master-local IPsec tunnel using IKEv1, enter a preshared key between 6-64
characters.
ipsec-custom-cert Use a custom-installed certificate on the master controller to establish a master-local IPsec
tunnel using IKEv2.
master-mac1 <mac1> The MAC address of the certificate on the Master.
master-mac2 <mac2> (Optional) the MAC address of the certificate on the backup master controller.
ca-cert <ca> User-defined name of a trusted CA certificate installed on the master controller. Use the
show crypto-local pki TrustedCA command to display the CA certificates that have been
imported into the controller.
server-cert <cert> User-defined name of a server certificate installed on the master controller. Use the show
crypto-local pki ServerCert command to display the server certificates that have been
imported into the controller.
interface Specify the uplink or VLAN interface on the master controller to initiate IKE.
uplink Use the master controller’s current active uplink to initiate IKE.
vlan <id> Specify a VLAN interface on the master controller to initiate IKE. If you do not specify a
VLAN, the controller IP is used.
fqdn <fqdn> Identify a dynamically addressed local controller by entering the Fully Qualified Domain
Name (FQDN) of the controller.
suite-b If you configure your master and local controllers to use IKEv2 and custom-installed
certificates, you can optionally use Suite-B cryptographic algorithms for IPsec encryption.
Specify one of the following options:
 gcm-128 Use 128-bit AES-GCM Suite-B encryption
 gcm-256 Use 256-bit AES-GCM Suite-B encryption
ipsec-factory-cert Use the factory-installed certificate on the master controller to establish a master-local
IPsec tunnel using IKEv2.
master-mac1 <mac1> The MAC address of the certificate on the Master.
master-mac2 <mac2> (Optional) the MAC address of the certificate on the backup master controller.
interface Specify the uplink or VLAN interface on the master controller to initiate IKE.
uplink Use the master controller’s current active uplink to initiate IKE.
vlan <id> Specify a VLAN interface on the master controller to initiate IKE. If you do not specify a
VLAN, the controller IP is used.
fqdn <fqdn> Identify a dynamically addressed local controller by entering the Fully Qualified Domain
Name (FQDN) of the controller.
Note: Changing the IP address of the master on a local controller requires a reboot of the local controller