272
set security ipsec tunnels name "123" IKE-mode
pre-shared-key ("") {hex string}
See page 130 for details about SafeHarbour IPsec tunnel capability.
Example: 0x1234
set security ipsec tunnels name "123" IKE-mode
neg-method {main | aggressive}
See page 130 for details about SafeHarbour IPsec tunnel capability.
Note: Aggressive Mode is a little faster, but it does not provide identity protection for nego-
tiations nodes.
set security ipsec tunnels name "123" IKE-mode
DH-group (1) { 1 | 2 | 5}
See page 130 for details about SafeHarbour IPsec tunnel capability.
set security ipsec tunnels name "123" IKE-mode
isakmp-SA-encrypt (DES) { DES | 3DES }
See page 130 for details about SafeHarbour IPsec tunnel capability.
set security ipsec tunnels name "123" IKE-mode
ipsec-mtu
mtu_value
This command is supported beginning with Version 7.4
The Maximum Transmission Unit is a link layer restriction on the maximum number of
bytes of data in a single transmission. The maximum allowable value (also the default) is
1500, and the minimum is 100.
set security ipsec tunnels name "123" IKE-mode isakmp-SA-hash
(MD5) {MD5 | SHA1}
See page 130 for details about SafeHarbour IPsec tunnel capability.