CONFIG Commands

set security ipsec tunnels name "123"

The name of the tunnel can be quoted to allow special characters and embedded spaces.

set security ipsec tunnels name "123" tun-enable (on) {on off}

This enables this particular tunnel. Currently, one tunnel is supported.

set security ipsec tunnels name "123" dest-ext-addressip-address

Specifies the IP address of the destination gateway.

set security ipsec tunnels name "123" dest-int-network ip-address

Specifies the IP address of the destination computer or internal network.

set security ipsec tunnels name "123" dest-int-netmask netmask

Specifies the subnet mask of the destination computer or internal network. The subnet mask specifies which bits of the 32-bit IP address represents network information. The default subnet mask for most networks is 255.255.255.0 (class C subnet mask).

set security ipsec tunnels name "123" encrypt-protocol (ESP) { ESP none }

See page 94 for details about SafeHarbour IPsec tunnel capability.

set security ipsec tunnels name "123" auth-protocol (ESP) {AH ESP none}

See page 94 for details about SafeHarbour IPsec tunnel capability.

set security ipsec tunnels name "123" IKE-mode pre-shared-key-type (hex) {ascii hex}

See page 94 for details about SafeHarbour IPsec tunnel capability.

257

Page 257
Image 257
Motorola 7.7.4 manual Set security ipsec tunnels name 123 tun-enable on on off, 257