Netopia CLI 874 manual Command Line Interface Commands Reference

2-128 Command Line Interface Commands Reference

ike phase1 { name index } initial-contact { yes no } show ike phase1 { name index } initial-contact

no ike phase1 { name index } initial-contact

These commands set or display the specified IKE Phase1 profile’s send initial-contact message setting.

ike phase1 { name index } negotiation { normal initiate-only respond-only } show ike phase1 { name index } negotiation

These commands set or display the specified IKE Phase1 profile’s negotiation setting.

ike phase1 { name index } pfs { yes no } show ike phase1 { name index } pfs

no ike phase1 { name index } pfs

These commands set, display, or disable the specified IKE Phase1 profile’s perfect forward secrecy setting.

ike phase1 { name index } port policy { "strict" "permissive" } show ike phase1 { name index } port policy

These commands set or display whether or not IKE requires packets to originate from the IANA port (500).

ike phase1 { name index } sa lifetime { seconds kbytes } { non-negative-integernone } show ike phase1 { name index } sa lifetime [ { seconds kbytes } ]

no ike phase1 { name index } sa lifetime [ { seconds kbytes } ]

These commands set, display, or disable one or both of the specified IKE Phase1 profile’s two SA lifetimes (in seconds and/or kilobytes protected). Specifying neither the keyword seconds nor the keyword kbytes with the show variant of this command displays both lifetime values. The keyword none is equivalent to the value zero, and indicates that there is no lifetime of the specified type. The Phase1 SA lifetime minimum is 300 (seconds) and the maximum is 1 (leap) year (31622400 seconds).

Note: It is a run-time checked error if both of the IKE Phase 1 profile’s SA lifetime values are set to zero or

none.

ike phase1 { name index } sa use-policy { new-sas-immediately old-sas-until-expired } show ike phase1 { name index } sa use-policy

These commands set or display the specified IKE Phase1 profile’s SA use policy.

ike phase1 { name index } vendor-id { yes no } show ike phase1 { name index } vendor-id

no ike phase1 { name index } vendor-id

These commands set, display, or disable the specified IKE Phase1 profile’s send vendor-id payload setting.