Efficient Networks 107-0001-000 manual Ike ipsec policies set destport, Value is added. c

Efficient Networks® Router family	Chapter 12: IKE/IPsec Commands
Command Line Interface Guide

ike ipsec policies set dest

Defines a destination filtering parameter value for the policy. The destination parameter requires that the data be intended for the specified destination IP address and mask. The destination is the device or network that finally receives the packet, not the router that routes the packet.

Mgmt Class

Security (R/W)

Input Format

ike ipsec policies set dest <ipaddress> <ipmask> <policyname>

Parameters

<ipaddress>a	IP address allowed to be the destination of the data.
<ipmask>a	IP network mask.
<policyname>b	Name of the IPsec policy to which the destination parameter
	value is added.c

aDotted-decimal notation

bASCII string

cTo see the policy names, use the ike ipsec policies list command.

Example

-> ike ipsec policies set dest 192.168.16.0 255.255.255.0 mypolicy

Response

Command prompt.

ike ipsec policies set destport

Defines a destination port filtering parameter value for the policy. The destination port parameter requires a specific destination port for the data or allows any destination port (*). (Because port numbers are TCP and UDP specific, a port filter is effective only when the protocol filter is TCP or UDP.)

Mgmt Class

Security (R/W)

Input Format

ike ipsec policies set destport <portnumber telnet http smtp tftp *> <policyname>

Efficient Networks® Page 12-11