Manualshelf

Specifications

ManualsBrandsEfficient Networks ManualsComputer equipmentRouter family Command line interface
341342343344345346347348349350
344 Chapter 8. Command Reference
Example: ike ipsec proposals set espenc 3des myproposal
IKE IPSEC PROPOSALS SET IPCOMP
Sets the proposal parameter that requests either no compression or LZS compression. For more information, see
IKE IPSec Proposal Commands, on page 141.
ike ipsec proposals set > <ProposalName>
One of the following:
NONE No compression.
LZS Compress using the LZS algorithm.
ProposalName Name of the IPsec proposal to which the IP compression parameter is added. To see the
proposal names in use, use the ike ipsec proposals list command.
Example:
ike ipsec proposals set ipcomp none myproposal
IKE IPSEC PROPOSALS SET LIFEDATA
Sets the proposal parameter that specifies the maximum number of kilobytes for the IPSec SA; 0 means unlimited.
After the maximum data is transferred, IKE renegotiates the connection. By limiting the amount of data that can
be transferred, you reduce the likelihood of the key being broken.
For more information on proposal parameters, see IKE IPSec Proposal Commands, on page 141.
kbytes Maximum number of kilobytes transferred before renegotiation; 0 means unlimited.
ProposalName Name of the IPsec proposal to which the lifedata parameter is added. To see the proposal
names in use, use the ike ipsec proposals list command.
Example: ike ipsec proposals set lifedata 50000 myproposal
IKE IPSEC PROPOSALS SET LIFETIME
Sets the proposal parameter that specifies the length of time (in seconds) before the IPSec SA expires; the
recommended value is 86400 (24 hours). When the time limit expires, IKE renegotiates the connection.
For more information on proposal parameters, see IKE IPSec Proposal Commands, on page 141.
seconds Maximum number of seconds before renegotiation; 0 means unlimited.
ProposalName Name of the IPsec proposal to which the lifetime parameter is added. To see the proposal
names in use, use the ike ipsec proposals list command.
ike ipsec proposals set ipcomp <NONE | LZS> <ProposalName>
ike ipsec proposals set lifedata <kbytes> <ProposalName>
ike ipsec proposals set lifetime <seconds> <ProposalName>