Chapter 14 IPSec Commands

Table 34 IPSec Commands (continued)

 

COMMAND

 

DESCRIPTION

ipsec config

dnsServer <ip-address>

Sets the DNS server IP address to assign to remote users.

ipsec config

antiReplay <YesNo>

Enables or disables the replay detection.

ipsec config

keyManage <0:IKE1:Manual>

Sets the rule to use IKE (ISAKMP) or manual key

 

 

management.

ipsec config

ike negotiationMode <0:Main

Sets the negotiation mode.

1:Aggressive>

 

ipsec config

ike authMethod

Sets the authentication method.

<0:PreSharedKey1:RSASignature>

 

ipsec config

ike certificate

Specifies the certificate the ZyXEL Device uses for

<certificate-name>

authentication.

ipsec config

ike preShareKey

Sets the pre-shared key.

<ascii0xhex>

 

ascii 0xhex: Enter characters in ASCII or in

 

 

hexadecimal format. The minimum length is 8.

ipsec config

ike p1EncryAlgo

Sets the phase 1 encryption algorithm.

<0:DES1:3DES2:AES>

 

ipsec config

ike p1EncryKeyLen

Sets the phase 1 encryption key length.

<0:1281:1922:256

 

ipsec config

ike p1AuthAlgo

Sets the phase 1 authentication algorithm.

<0:MD51:SHA1>

 

ipsec config

ike p1SaLifeTime <seconds>

Sets the phase 1 IPSec SA life time.

ipsec config

ike p1KeyGroup <0:DH11:DH2>

Sets the phase 1 IKE SA key group.

ipsec config

ike activeProtocol

Sets the active protocol.

<0:AH1:ESP>

 

 

ipsec config

ike p2EncryAlgo

Sets the phase 2 encryption algorithm.

<0:Null1:DES2:3DES3:AES>

 

ipsec config

ike p2EncryKeyLen

Sets the phase 2 encryption key length.

<0:1281:1922:256

 

ipsec config

ike p2AuthAlgo

Sets the phase 2 authentication algorithm.

<0:MD51:SHA1>

 

ipsec config

ike p2SaLifeTime <seconds>

Sets the phase 2 IPSec SA life time.

ipsec config ike encap

Sets the encapsulation mode.

<0:Tunnel1:Transport>

 

ipsec config ike pfs <0:None1:DH12:DH2>

Sets Perfect Forward Secrecy for phase 2.

ipsec config manual activeProtocol

Sets the protocol the manual key rule uses.

<0:AH1:ESP>

 

 

ipsec config manual ah encap

Sets the encapsulation mode when using AH protocol in

<0:Tunnel1:Transport>

the manual rule.

ipsec config manual ah spi <decimal>

Sets the SPI information when using AH protocol in the

 

 

manual rule.

 

 

decimal: The maximum length is 9.

 

 

ipsec config manual ah authAlgo

Sets the authentication algorithm when using AH protocol

<0:MD51:SHA1

 

in the manual rule.

ipsec config manual ah authKey <ascii>

Sets the authentication key when using AH protocol in the

 

 

manual rule.

 

91

DSL & IAD CLI Reference Guide