match identity remote address
To specify the IP address of the remote node, use the
match identity remote address
command in IKEv2
profile configuration mode.
match identity remote address
{
ipv4-address
[
subnet-mask
]}
Syntax Description
IP address of the remote
node.
ipv4-address
Subnet mask address.
subnet-mask
Command Default
None
Command Modes
IKEv2 profile configuration
Command History
Modification
Release
This command is
introduced.
Release
7.0.1
Example
The following is a sample in which an IKEv2 profile is configured.
RP/0/RP0/CPU0:ios#configure
Thu Mar
7 20:00:36.490 UTC
RP/0/RP0/CPU0:ios(config)#ikev2 profile profile1
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#
match identity remote address 10.0.0.1
255.255.255.0
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#keyring kyr1
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#lifetime 120
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#commit
Thu Mar
7 20:15:03.401 UTC
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#exit
RP/0/RP0/CPU0:ios(config)#exit
RP/0/RP0/CPU0:ios#show ikev2 profile profile1
Thu Mar
7 20:15:25.776 UTC
Profile Name
: profile1
===============================================================================
Keyring
: kyr1
Lifetime(Sec)
: 120
DPD Interval(Sec)
: 10
DPD Retry Interval(Sec)
: 2
Match ANY
: NO
Total Match remote peers
: 1
Addr/Prefix
: 10.0.0.1/255.255.255.0
Command Reference for Cisco NCS 1004
50
Commands
match identity remote address