Concept Guide

620| master-redundancy peer-ip Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
If your master controllers use a pre-shared key for authentication, they will create the IPsec tunnel using IKEv1.
If your master and local controllers use certificates for authentication, the IPsec tunnel will be created using
IKEv2.
Example
The following command configures the local controller on a master controller:
(host) (config) #peer-ip 10.4.62.5 ipsec-custom-cert master-mac 00:02:2D:11:55:4D ca-cert
cacert1 server-cert server1
Command History
Release Modification
ArubaOS 3.0 Command introduced.
ArubaOS 6.1 The ipsec-factory-cert and ipsec-custom-cert parameters were
introduced to allow certificate-based authentication of master and local
controllers.
Command Information
Platform License
Command
Mode
Available on all platforms The suite-b gcm-128 and suite-b gcm-256 encryption
options for IPsec custom certificates requires the
Advanced Cryptography (ACR) license. All other
parameters are available in the base operating system
Config mode
on master
controllers