Digi 90000566_H manual Set IKE/ISAKMP SA Phase 1 Options, Set IKE/ISAKMP SA Phase 2 Options

set vpn

[isakmp options]:

mode=isakmp

[shared_key={ascii keyhex key}]

To specify proposals: see syntax and options for “Set IKE/ISAKMP SA Phase 2 Options.”

Set IKE/ISAKMP SA Phase 1 Options

syntax: set vpn phase1 [index=1-2] [state={enableddisabled}] [auth_method={shared_keydssrsa}] [authentication={md5sha1}] [encryption={des3desaes}] [encryption_size={0128192256}]

[sa_lifetime=10-2^32] (Please see option details below)

[sa_lifetime_data=0-2^32] (Please see option details below)

Set IKE/ISAKMP SA Phase 2 Options

set vpn phase2 [tunnel=1-2] [name=tunnel name] [proposal=(1-8)] [state={enableddisabled}] [authentication={nonemd5sha1}] [encryption={nonedes3desaes}]

[sa_lifetime=60-2^32] (Please see option details below)

[sa_lifetime_data=0-2^32] (Please see option details below)

Display current VPN settings

set vpn global

set vpn tunnel

set vpn phase1

set vpn phase2

230 Chapter 2 Command Descriptions