Users Guide

masterip
masterip <ipaddr>
ipsec <key> [interface uplink|{vlan <id>}] [fqdn <fqdn>]
ipsec-custom-cert master-mac1 <mac1> [master-mac2 <mac2>] ca-cert <ca> server-cert <cert>
[interface uplink|{vlan <id>}] [fqdn <fqdn>] [suite-b gcm-128|gcm-256]
ipsec-factory-cert master-mac1 <mac1> [master-mac2 <mac2>] [interface uplink|{vlan <id>}]
[fqdn <fqdn>]
Description
This command configures the IP address and preshared key or certificate for the master controller on a local
controller.
Syntax
Parameter
Description
<ipaddr>
IP address of the master controller.
ipsec <key>
To establish the master-local IPsec tunnel using IKEv1, enter a
preshared key between 6-64 characters.
ipsec-custom-cert
Use a custom-installed certificate on the master controller to
establish a master-local IPsec tunnel using IKEv2.
master-mac1 <mac1>
The MAC address of the certificate on the Master.
master-mac2 <mac2>
(Optional) the MAC address of the certificate on the backup master
controller.
ca-cert <ca>
User-defined name of a trusted CA certificate installed on the master
controller. Use the show crypto-local pki TrustedCA command to
display the CA certificates that have been imported into the
controller.
server-cert <cert>
User-defined name of a server certificate installed on the master
controller. Use the show crypto-local pki ServerCert command to
display the server certificates that have been imported into the
controller.
interface
Specify the uplink or VLAN interface on the master controller to
initiate IKE.
uplink
Use the master controller’s current active uplink to initiate IKE.
vlan <id>
Specify a VLAN interface on the master controller to initiate IKE. If you
do not specify a VLAN, the controller IP will be used.
Dell Networking W-Series ArubaOS 6.4.x | User Guide masterip | 638