Comment
Author: Admin | 2025-04-27
To its original value. [no] crypto ipsec security-association pmtu-aging reset-interval Step 5 To create a crypto map, perform the following site-to-site steps using either single or multiple context mode: Assign an ACL to a crypto map: crypto map map-name seq-num match address access-list-name A crypto map set is a collection of crypto map entries, each with a different sequence number (seq-num) but the same map name. Use the access-list-name to specify the ACL ID, as a string or integer up to 241 characters in length. In the following example, mymap is the name of the crypto map set. The map set sequence number 10, which is used to rank multiple entries within one crypto map set. The lower the sequence number, the higher the priority. Example: In this example, the ACL named 101 is assigned to crypto map mymap. crypto map mymap 10 match address 101 Specify the peer to which the IPsec-protected traffic can be forwarded: crypto map map_name sequence numberset peer ip_address1 [ip_address2] [...] Example: crypto map mymap 10 set peer 192.168.1.100 The ASA sets up an SA with the peer assigned the IP address 192.168.1.100. Note Beginning with 9.14(1), ASA supports multiple peers in IKEv2 crypto map. You can add a maximum of 10 peers to the list. Specify which IKEv1 transform sets or IKEv2 proposals are allowed for this crypto map. List multiple transform sets or proposals in order of priority (highest priority first). You can specify up to 11 transform sets or proposals in a
Add Comment