Concept Guide

301| crypto dynamic-map Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Range Default
kilobytes <kilobytes>
Lifetime for the SA in kilobytes. 1000 -
1000000000
—
set transform-set
Name of the transform set for this
dynamic map. You can specify up
to four transform sets. You
configure transform sets with the
crypto ipsec transform-set
command.
— default-
transfor
m
version
Specify the version of IKE protocol
the controller uses to set up a
security association (SA) in the
IPsec protocol suite
l v1:IKEv1
l v2: IKEv2
— v1
Usage Guidelines
Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a
dynamic map, you can optionally associate that map with the default global map using the command crypto
map global-map.
Example
The following command configures a dynamic map:
(host) (config)# crypto dynamic-map dmap1 100
set pfs group2
set security-association lifetime seconds 300
Command History
Release Modification
ArubaOS 3.0 Command introduced
ArubaOS 6.1 The version parameter was introduced.
The pfs parameter was modified to support the group19 and group20 PFS
group values.
ArubaOS 6.3 The set security-association lifetime kilobytesand Diffie-Hellman set pfs
group 14 parameters were added.
ArubaOS 6.4 The disable/enable parameters were introduced.