Manuals / Nortel Networks / Computer Equipment / Network Card

Nortel Networks 620, 608(WL) manual

Models: 620 608(WL)

1 222

Download 222 pages 37.22 Kb

<>

Configuration via Local Pages Auxiliary Commands Default Peer Concept Peer Phase Authorization Password Inactivity Timeout Advanced Features Switch to the Aggressive Mode Encapsulation mode Keyword

Page 2

Page 1 Page 3

Image 2

Nortel Networks 620, 608(WL) manual

Page 1 Page 3

Related manuals

Manual 222 pages 37.22 Kb

Related pages Troubleshooting for Ryobi 770rEB Specification s for Motorola DCT 2000 When using the cooktop for Whirlpool RS385PCE Frequently asked questions FAQs for HP hn200e Antenna Installation Safety for Westinghouse UW37SC1W Parts List Generator Model TPG-6000H-DX for Honda Power Equipment TPG-4300H-DX Language code list for Panasonic DVD-LS93 Additional Information Error messages for Pioneer DEH-P65BT Disassembly for Clevo D900F Connection and Installation for Atlona AT-PRO3HD44M

Contents

SpeedTouch608WL/620 Page SpeedTouch 608WL/620 Document Information CopyrightTrademarks Contents Configuration via the Command Line Interface Troubleshooting SpeedTouch IPSec 161 Advanced Features Advanced Connection 213 Contents About this IPSec Configuration Guide Terminology Documentation and software updatesAbout this IPSec Configuration Guide IPSec Concept for secure IP connections TopicAuthentication Header Encapsulated Security Payload IPSec ConceptsSecurity Associations Tunnel Mode Chapter SpeedTouch IPSec terminology Policy Security Descriptor Authentication Attribute Peer Phase Connection Phase Network descriptor Chapter Configuration via Local Pages Topic LAN to LAN Application Network 10.0.0.0/24 Network 20.0.0.0/24Remote Gateway Address Known Remote Gateway Address UnknownRemote Gateway Address Known Click Inactivity Timeout Inactivity Timeout Default valueIKE Exchange Mode Primary Untrusted Physical InterfaceLayout with additional Descriptors IKE Security DescriptorsParameter Value for AESMD5 Shared key AuthenticationLayout for pre IKE Authentication with Preshared Key Identity type Keyword ExamplesExample of a completed Click Remote Gateway Address Unknown Switch to the Aggressive Mode Gateway Address UnknownInactivity Timeout Default value IKE Security Descriptors Layout for pre IKE Authentication with Preshared Key Advanced Peers Security Descriptors Confirm the IKE Authentication , IKESecurity Descriptors and Miscellaneous Inactivity Timeout Default value Chapter Identification Interface John.doe@corporate.netExample of a completed Click Connections Network IP field Type Valid network types are Keyword ExamplesProtocol Parameter Value for AESMD5TUNStarting and stopping a connection VPN Client Click Backup Server IP Address or Fqdn IKE Security Descriptor Server IP Address orSelect When Advanced Connections Security DescriptorsChapter Preshared Secret Manual Dialup Automatic Start Local LAN IP range Examples Set of Server Vendor specific parametersMethod 2 Manual Start Starting the VPN Client ConnectionMethod 1 Automatic Start Dialling VPN Client Connect Client Identification parameter is Server Vendor specificChapter Closing a Connection VPN Server VPN Server Click Parameter Value for AESMD5 Layout with additional Descriptors IPSec Security Example DESMD5TUNInactivity Timeout Default value Push IP Virtual IP RangeNetmask Domain nameIdentity type Keyword Examples Remote ID Filter Type and Remote ID Filter @corporate.netClick Add User Certificates Chapter Advanced VPN Menu Advanced Peers sub-pages See Connection Profiles Peer Profiles Local ID type Keyword Examples Remote ID type Keyword ExamplesChapter Chapter Authentication Parameter Possible values DescriptionParameter Description Peer DescriptorsDescriptors page layout Parameter table Hashing algorithm AlgorithmValid key lengths bits Diffie-Hellman group Number of bits KeywordLayout Peer OptionsOptions Peer ProfileAuthentication XAuth on page 176 and following VPN-ClientChapter VPN-Server Chapter Chap PasswordVPN-Server-XAuth Connection Profiles Keyword retrievefromserver Keyword allocatedvirtualipChapter Type of network and IP address What is a Network Descriptor? How is it used?Networks Chapter Connection Descriptors Descriptors page layoutAlgorithm Valid key lengths bits PFSKilobytes 30 = 1 073 741 Connection Options Connection ProfileClient Configuration via the Command Line Interface Basic IPSec configuration procedure What do we want to do? How do we configure it SpeedTouch?103 Peer Authentication Attribute Authentication Attribute Parameters List all Authentication Attributes Create a New Authentication Attribute Set or Modify the Authentication Attribute Parameters Secret1Delete an Authentication attribute Peer Security Descriptor Peer Security Descriptor Parameters Parameter Keyword DescriptionAlgorithm Valid key sizes Popular sizes Default size Bits Cryptographic function crypto113 List all Peer Security Descriptors Create a New Peer Security Descriptor Set or Modify the Peer Descriptor Parameters Name = peerdes1Result of this operation is verified with the list command Delete a Peer DescriptorPeer Peer parameters Peer parameters Parameter Keyword DescriptionExchange mode Keyword Valid values Remote Identifier remoteid Corporate.net122 List all peer entities DialuppppoeCreate a new peer entity Use the list command to verify the results of the operation Set or modify the peer parametersDelete a Peer entity Connection Security Descriptor Connection Security Descriptor parameters 129 Encapsulation mode Keyword List all Connection Security Descriptors Ipsec=connectionCreate a new Connection Security Descriptor Set the Connection Security Descriptor Parameters Name = cnctdes1Delete a Connection Security Descriptor 135 Network Descriptor Parameters Type Valid network types Keyword Examples Are137 Create a New Network Descriptor Set the Network Descriptor Parameters Net1Delete a Network Descriptor Connection Connection Parameters Connection parameters Parameter Keyword DescriptionLocal network localnetwork Remote network remotenetwork 144 List all Connections Create a New Connection Set or Modify the Connection Parameters Name = connect1Delete a Connection Start a Connection Stop a connection Auxiliary Commands Control of general VPN settings Config CommandWhat is it used for Display the VPN configuration settings AutoProxyARP When do I need ProxyARP An example of Auto ProxyARP Flush Command Clear Command Group Ipsec clear command group Organisation of the IPSec Command GroupIpsec command group See Ipsec connection command group Ipsec debug command groupIpsec peer command group Ipsec show command group Troubleshooting SpeedTouch IPSec Via the Debug Web pages Security Association should be activeBrowse again to Expert mode VPN Debug Logging How to monitor the IPSec negotiationsBrowse to Expert mode VPN Debug Logging 164 Via the CLI Show command group Show command group166 Via the CLI Debug command group 168 Severity Contents Via Snmp Debugging via SnmpPing command Adapting the routing table Pinging from the SpeedTouch to the remote private network172 Advanced Features IPSec and the Stateful Inspection Firewall Surfing through the VPN tunnel Web Browsing Interception and surfing through a tunnelExtended Authentication XAuth How does it work177 VPN Client parameters VPN Client parameters Parameter Keyword DescriptionCreate a new vpnclient Ipsec= Ipsec=peerSet or modify the vpnclient parameters Attach the vpnclient entity to the peer entity Modify the peer parameters Example182 VPN Server parameters VPN Server parameters Parameter Keyword DescriptionPuship Possible values Description Default value Create a new VPN server Set or modify the vpnserver parameters Attach the vpnserver entity to the peer entity XAuth Users Pool XAuth Pool parameters XAuth Pool parameters Parameter Keyword DescriptionCreate a new XAuth pool Modify the xauthpool type Attach the xauthpool entity to the vpnserver entity Modify the vpnserver parameters ExampleDelete an xauthpool entity XAuth User parameters Create a new XAuth user Set or modify the password of an XAuth user Delete an xauthuser entity Default Peer Concept PPPExample IPSec connection, applying the default peer concept Advanced Features SpeedTouch 1 IPSec peer configurationOne Peer Multiple Connections PeerPossible values Default value Option Keyword DescriptionDpdtimeout Unit Default value Dpdidleperiod Unit Default valueDpdxmits Default value Inactivity Unit Default valueList all Peer Options lists Create a Peer Options list Set or modify the Peer Option list parameters Delete a Peer Options list Virtualif Possible values IPSec routing modeRouted Addroute Possible values Default value Forcedf Possible values Default valueMinmtu Unit Default value Don’t Fragment bit forcedfList all Connection Options lists Create a Connection Options list Set or modify the Connection Option list parameters Delete an Options list Advanced Connection 214 Local match localmatch Keyword Followed by a Network name216 Remote match remotematch217 218 Page Need more help?