Concept Guide

Related Commands
Command Description Mode
crypto-local isakmp allow-via-
subnet-routes
Use this command to allow a controller to
accept VIA-published subnets.
Config mode
crypto-local isakmp ca-certificate Use this command to assign the Certificate
Authority (CA) certificate used to authenticate
VPN clients.
Config mode
crypto-local isakmp certificate-
group
Use this command to assign a certificate group
so you can access multiple types of certificates
on the same controller.
Config mode
crypto-local isakmp disable-
aggressive-mode
Use this command to disable the IKEv1
aggressive mode.
Config mode
crypto-local isakmp dpd Use this command to configure IKE Dead Peer
Detection (DPD) on the local controller.
Config mode
crypto-local isakmp key Use this command to configure the IKE
preshared key on the local controller for site-
to-site VPN.
Config mode
crypto-local isakmp server-
certificate
Use this command to assign the server
certificate used to authenticate the controller
for VPN clients.
Config mode
crypto-local isakmp xauth Use this command to enable the IKE XAuth for
VPN clients.
Config mode
Command History
Release Modification
ArubaOS 3.4 Command introduced.
ArubaOS 6.1 The show crypto-local isakmp certificate-group command was
introduced.
ArubaOS 6.3 The disable-aggressive-mode parameter was introduced.
ArubaOS 6.4.2.9,
ArubaOS 6.4.3.3
The peer and fqdn sub-parameters were introduced.
ArubaOS 6.5.0.0 The show crypto-local isakmp allow-via-subnet-routes command was
introduced.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide show crypto-local isakmp | 1420