set security ipsec tunnels name "123" IKE-mode pre-shared-key ("") {hex string}

See page 130 for details about SafeHarbour IPsec tunnel capability.

Example: 0x1234

set security ipsec tunnels name "123" IKE-mode neg-method {main aggressive}

See page 130 for details about SafeHarbour IPsec tunnel capability.

Note: Aggressive Mode is a little faster, but it does not provide identity protection for nego- tiations nodes.

set security ipsec tunnels name "123" IKE-mode DH-group (1) { 1 2 5}

See page 130 for details about SafeHarbour IPsec tunnel capability.

set security ipsec tunnels name "123" IKE-mode isakmp-SA-encrypt (DES) { DES 3DES }

See page 130 for details about SafeHarbour IPsec tunnel capability.

set security ipsec tunnels name "123" IKE-mode ipsec-mtu mtu_value

This command is supported beginning with Version 7.4

The Maximum Transmission Unit is a link layer restriction on the maximum number of bytes of data in a single transmission. The maximum allowable value (also the default) is 1500, and the minimum is 100.

set security ipsec tunnels name "123" IKE-mode isakmp-SA-hash (MD5) {MD5 SHA1}

See page 130 for details about SafeHarbour IPsec tunnel capability.

272

Page 272
Image 272
Netopia 2200 manual Set security ipsec tunnels name 123 IKE-mode DH-group 1 1 2, 272