Chapter 12: IKE/IPsec Commands

Efficient Networks® Router family

 

 

Command Line Interface Guide

 

 

 

 

 

Table 12-1: Internet Key Exchange Command Listing (Cont.)

 

 

 

 

 

Command

Function

 

 

 

 

 

 

 

 

 

 

ike ipsec policies set peer

Defines a peer filtering parameter value for the pol-

 

 

 

icy.

 

 

 

 

 

 

ike ipsec policies set pfs

Defines the pfs filtering parameter value for the

 

 

 

policy.

 

 

 

 

 

 

ike ipsec policies set pro-

Defines a proposal filtering parameter value for the

 

 

posal

policy.

 

 

 

 

 

 

ike ipsec policies set proto-

Defines a protocol filtering parameter value for the

 

 

col

policy.

 

 

 

 

 

 

ike ipsec policies set

Defines a source filtering parameter value for the

 

 

source

policy.

 

 

 

 

 

 

ike ipsec policies set sour-

Defines a source port filtering parameter value for

 

 

ceport

the policy.

 

 

 

 

 

 

ike ipsec policies set trans-

Defines a translate filtering parameter value for the

 

 

late

policy.

 

 

 

 

 

 

ike ipsec proposals add

Defines the name of an IKE IPSec proposal.

 

 

 

 

 

 

ike ipsec proposals delete

Deletes an existing IKE IPSec proposal.

 

 

 

 

 

 

ike ipsec proposals list

Lists the IPSec proposals.

 

 

 

 

 

 

ike ipsec proposals set ah-

Sets the proposal parameter that determines

 

 

auth

whether AH message authentication is requested

 

 

 

and, if it is requested, the hash algorithm used.

 

 

 

 

 

 

ike ipsec proposals set es-

Sets the proposal parameter that determines

 

 

pauth

whether ESP message authentication is requested

 

 

 

and, if it is requested, the hash algorithm used.

 

 

 

 

 

 

ike ipsec proposals set es-

Sets the proposal parameter that determines

 

 

penc

whether ESP encryption is requested and, if it is re-

 

 

 

quested, the encryption method used.

 

 

 

 

 

 

ike ipsec proposals set ip-

Sets the proposal parameter that requests either

 

 

comp

no compression or LZS compression.

 

 

 

 

 

 

ike ipsec proposals set life-

Sets the proposal parameter that specifies the

 

 

data

maximum number of kilobytes for the IPSec Secu-

 

 

 

rity Authentication (SA).

 

 

 

 

 

 

ike ipsec proposals set life-

Sets the proposal parameter that specifies the

 

 

time

length of time (in seconds) before the IPSec Secu-

 

 

 

rity Authentication (SA) expires.

 

 

 

 

 

 

ike peers add

Defines the name of a new IKE peer.

 

 

 

 

 

 

ike peers delete

Deletes an existing IKE peer entry.

 

 

 

 

 

Page 12-2

Efficient Networks®

Page 360
Image 360
Efficient Networks 107-0001-000 manual Defines a peer filtering parameter value for the pol Icy, Lists the IPSec proposals