Release Notes

553 | masterip Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
masterip
masterip <ipaddr>
ipsec <key> [interface uplink|{vlan <id>}] [fqdn <fqdn>]
ipsec-custom-cert master-mac1 <mac1> [master-mac2 <mac2>] ca-cert <ca> server-cert <cert>
[interface uplink|{vlan <id>}] [fqdn <fqdn>] [suite-b gcm-128|gcm-256]
ipsec-factory-cert master-mac1 <mac1> [master-mac2 <mac2>] [interface uplink|{vlan <id>}]
[fqdn <fqdn>]
Description
This command configures the IP address and preshared key or certificate for the master controller on a local
controller.
Syntax
Parameter
Description
<ipaddr>
IP address of the master controller.
ipsec <key>
To establish the master-local IPsec tunnel using IKEv1, enter a
preshared key between 6-64 characters.
ipsec-custom-cert
Use a custom-installed certificate on the master controller to establish
a master-local IPsec tunnel using IKEv2.
master-mac1 <mac1>
The MAC address of the certificate on the Master.
master-mac2 <mac2>
(Optional) the MAC address of the certificate on the backup master
controller.
ca-cert <ca>
User-defined name of a trusted CA certificate installed on the master
controller. Use the show crypto-local pki TrustedCA command to
display the CA certificates that have been imported into the controller.
server-cert <cert>
User-defined name of a server certificate installed on the master
controller. Use the show crypto-local pki ServerCert command to
display the server certificates that have been imported into the
controller.
interface
Specify the uplink or VLAN interface on the master controller to initiate
IKE.
uplink
Use the master controller’s current active uplink to initiate IKE.
vlan <id>
Specify a VLAN interface on the master controller to initiate IKE. If you
do not specify a VLAN, the controller IP will be used.
fqdn <fqdn>
Identify a dynamically addressed local controller by entering the Fully
Qualified Domain Name (FQDN) of the controller.
suite-b
If you configure your master and local controllers to use IKEv2 and
custom-installed certificates, you can optionally use Suite-B
cryptographic algorithms for IPsec encryption. Specify one of the
following options:
l gcm-128 Use 128-bit AES-GCM Suite-B encryption
l gcm-256 Use 256-bit AES-GCM Suite-B encryption