Release Notes

Parameter Description Range Default
set transform-set
Name of the transform set for this
dynamic map. You can specify up to
four transform sets. You configure
transform sets with the crypto ipsec
transform-set command.
— default-
transform
version
Specify the version of IKE protocol
the controller uses to set up a
security association (SA) in the IPsec
protocol suite
l v1:IKEv1
l v2: IKEv2
— v1
Usage Guidelines
Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a
dynamic map, you can optionally associate that map with the default global map using the command crypto
map global-map.
Example
The following command configures a dynamic map:
(host) (config)# crypto dynamic-map dmap1 100
set pfs group2
set security-association lifetime seconds 300
Command History
Release Modification
ArubaOS 3.0 Command introduced
ArubaOS 6.1 The version parameter was introduced.
The pfs parameter was modified to support the group19 and group20 PFS
group values.
ArubaOS 6.3 The set security-association lifetime kilobytesand Diffie-Hellman set pfs
group 14 parameters were added.
ArubaOS 6.4 The disable/enable parameters were introduced.
Command Information
Platforms Licensing Command Mode
All platforms The group19 and group20 PFS options requires
the Advanced Cryptography (ACR) license. All other
parameters are available in the base operating
system.
Config mode on master
controllers
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide crypto dynamic-map | 272