Release Notes
553 | masterip Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
masterip
masterip <ipaddr>
ipsec <key> [interface uplink|{vlan <id>}] [fqdn <fqdn>]
ipsec-custom-cert master-mac1 <mac1> [master-mac2 <mac2>] ca-cert <ca> server-cert <cert>
[interface uplink|{vlan <id>}] [fqdn <fqdn>] [suite-b gcm-128|gcm-256]
ipsec-factory-cert master-mac1 <mac1> [master-mac2 <mac2>] [interface uplink|{vlan <id>}]
[fqdn <fqdn>]
Description
This command configures the IP address and preshared key or certificate for the master controller on a local
controller.
Syntax
Parameter
Description
<ipaddr>
IP address of the master controller.
ipsec <key>
To establish the master-local IPsec tunnel using IKEv1, enter a
preshared key between 6-64 characters.
ipsec-custom-cert
Use a custom-installed certificate on the master controller to establish
a master-local IPsec tunnel using IKEv2.
master-mac1 <mac1>
The MAC address of the certificate on the Master.
master-mac2 <mac2>
(Optional) the MAC address of the certificate on the backup master
controller.
ca-cert <ca>
User-defined name of a trusted CA certificate installed on the master
controller. Use the show crypto-local pki TrustedCA command to
display the CA certificates that have been imported into the controller.
server-cert <cert>
User-defined name of a server certificate installed on the master
controller. Use the show crypto-local pki ServerCert command to
display the server certificates that have been imported into the
controller.
interface
Specify the uplink or VLAN interface on the master controller to initiate
IKE.
uplink
Use the master controller’s current active uplink to initiate IKE.
vlan <id>
Specify a VLAN interface on the master controller to initiate IKE. If you
do not specify a VLAN, the controller IP will be used.
fqdn <fqdn>
Identify a dynamically addressed local controller by entering the Fully
Qualified Domain Name (FQDN) of the controller.
suite-b
If you configure your master and local controllers to use IKEv2 and
custom-installed certificates, you can optionally use Suite-B
cryptographic algorithms for IPsec encryption. Specify one of the
following options:
l gcm-128 Use 128-bit AES-GCM Suite-B encryption
l gcm-256 Use 256-bit AES-GCM Suite-B encryption