create connection
To add a new IPSec connection, use the create connection command. If a connection with the specified name
already exists, the command will fail.
To add or edit an IPSec connection, use the enter connection command. If the specified connection does not
exist, it is created and entered; if the connection exists, it is entered.
You also can use the scope form of this command to enter an existing connection to assign or change properties.
Generally, “scoping into” an object is more convenient than entering it, since the objectʼs name is usually all
that is needed, whereas the enter form of the command often requires entering all its definition parameters.
To delete an existing connection, use the delete form of this command.
create connection name
enter connection name
delete connection name
scope connection name
Syntax Description
The connection name; can be up to 16 alphanumeric characters.
name
Command Modes
scope security/scope ipsec/
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
When you create a new IPSec connection, you are automatically entered into security/ipsec/connection mode
with an asterisk indicating the new connection is not yet committed. You can configure the connection before
committing it.
After you create a connection, the name cannot be changed. You must delete the connection and create a new
one.
Example
This example shows how to create and enter a new IPSec connection:
firepower # scope security
firepower /security # scope ipsec
firepower /security/ipsec # enter connection ipsec_conn2
firepower /security/ipsec/connection* #
Related Commands
DescriptionCommand
Sets the IPSec connection administrative state to disabled or enabled.set adminstate
Shows current IPSec connection information.show connection
Cisco Firepower 4100/9300 FXOS Command Reference
57
A – R Commands
create connection