Enterasys Networks XSR CLI manual crypto

Other ADSL Commands
XSR CLI Reference Guide 13-91
Default
Disabledbydefault.Whenenabled,alloperationalparametersmustbespecified.
Example
Thefollowingexampleconfiguresasub‐interfacebackupwithaDialerIDof1,delayof20
secondsbeforeswitchingtothebackup,andadelayof10secondsbeforeswitchingbacktothe
ATMsub‐interface.Theexamplealsoconfiguresthesub‐interfacetoswitchtothebackuplineat
8:30P. M . thenswitchbacktothenormalinterfaceat9:50P. M . :
XSR(config-if<ATM0/1/0.1>)#backup interface Dialer1
XSR(config-if<ATM0/1/0.1>)#backup delay 20 10
XSR(config-if<ATM0/1/0.1>)#backup time-range 20:30 21:50
crypto
ThiscommandenablesandconfigurestheDF‐bitVPNparameteronthisATMsub‐interface.This
commandrequiresaproperlyconfiguredATMsub‐interface.
Syntax
crypto {ezipsec | ipsec df-bit {clear | copy | set}| map [map-name]}
Syntax of the “no” Form
Thiscommand’snodisablesthespecifiedDF‐bitsetting:
no crypto {ezipsec | ipsec df-bit}| map [map-name]}
Mode
ATMSub‐Interfaceconfiguration:XSR(config-if<ATMx/x/x.x>)#
Default
Disabled
Example
ThefollowingexampleenablesEZ‐IPSecwiththeoptionofhavingtheXSRlookintheoriginal
packetfortheouterDFbitsetting.Thisexamplealsoattachesthecryptomapets‐vpn:
ezipsec EZ‐IPSecautomaticconfigurationenabled.
ipsec df-bit IPSecenabledwiththefollowingDF‐bitoptions:
clear TheouterIPheaderclearstheDFbitandtheXSRmayfragmentthepacket
toaddIPSecencapsulation.
copy XSRsearchestheoriginalpacketfortheouterDF‐bitsetting.
set TheouterIPheaderhastheDF‐bitset;but,theXSRmayfragmentthe
packetiftheoriginalpacketclearedtheDF‐bit.
map-name Attachesacryptomaptotheinterfaceandname(optional).