ike-key-id

If authentication between IKEv2 peers is based on a PSK associated with an identity asserted in the IKE Identification Payload, associate received asserted identities with a specified PSK.

Parameters

name

Specifies the unique name of this instance of the ike-key-id configuration element. You can assign this object by entering the name of this element to the local-id-profile or the remote-id-profile of an ike-sainfo object.

key-id

Specifies the identity, similar to a user name, to associate an asserted identity with a PSK. Valid values include IPv4 or IPv6 addressing, or a keyid string.

presharedkey

Specifies the PSK for the applicable security association. The system encrypts and never displays a presharedkey in ACLI or in configuration output.

id-type

Specifies the user Identity type to be used in the IDi or IDr for authentication. Values include:

• ipv4—Specifies that this keyid parameter is in the IPv4 format
• ipv6—Specifies that this keyid parameter is in the IPv6 format
• key—Specifies that this keyid parameter is a string

Path

ike-key-id is a subelement under the ike element. The full path from the topmost ACLI prompt is: security > ike > ike-key-id.

Note:

This is a multiple instance configuration element.