Digi 90000566_H Inboundenckey=ascii keyhex key, Outboundspi=256, Outboundauthkey=ascii keyhex key

set vpn

inbound_enc_key={ascii keyhex key}

The encryption key for inbound traffic, according to the authentication algorithm specified by the “inbound_encryption” option. The encryption key may be specified as an ASCII value using alpha- numeric characters or may be specified as a hexadecimal value prefixed by “0x”. The following table lists the associated lengths of the encryption keys based on the encryption algorithm.

Algorithm

Size

Key Length

ASCII Hexadecimal

DES	64-bit	8	16
3 DES	192-bit	24	48
AES	128-bit	16	32

outbound_spi=256 - 2^32

The SPI for outbound traffic.The SPI defines the unique index for a tunnel used to identify the security settings for IPSec. The SPI is a 32- bit unsigned value that must not be less than 256.

outbound_authentication={nonemd5sha1}

The optional authentication algorithm used with the associated authentication key specified by the “outbound_auth_key” option to authorize access on the VPN tunnel for outbound traffic.

none

No authentication algorithm is used.

md5

MD5 authentication algorithm, which uses 128-bit keys.

sha1

SHA1 authentication algorithm, which uses 160-bit keys.

outbound_auth_key={ascii keyhex key}

The authentication key for outbound traffic, according to the authentication algorithm specified by the “outbound_authentication” option. The authentication key may be specified as an ASCII value using alpha-numeric characters or may be specified as a hexadecimal value prefixed by “0x”. For the allowed lengths for this key, see “inbound_auth_key.”

outbound_encryption={nonedes3desaes}

The optional encryption algorithm used with the associated encryption key specified by the “outbound_enc_key” option to encrypt data on the VPN tunnel for outbound traffic. For the allowed values, see “inbound_encryption.”

outbound_enc_key={ascii keyhex key}

The encryption key for outbound traffic, according to the authentication algorithm specified by the “outbound_encryption” option. For the allowed values and key length, see “inbound_enc_key.”

236 Chapter 2 Command Descriptions