Specifications

Chapter 8. Command Reference 351
PRESHARE Preshared key.
ProposalName Name of the IKE proposal to which the session authentication parameter is added. To see
the proposal names in use, use the ike proposals list command.
Example: ike proposals set session_auth preshare my_ike_proposal
IPSec Commands
The following commands allow you to define an IPSec connection without IKE. To read about IPSec Security,
see IPSec (Internet Protocol Security), on page 134.
Note: If you define a tunnel using IPSec commands, the keys will remain static. This could pose a security risk
and is not recommended. Use of IKE for key management is recommended.
IPSEC ADD
Defines an IPSec security association (SA) name.
ipsec add <SAname>
SAname Name for the new IPSec SA.To see the IPSec SA names in use, use the ipsec list command.
Example: ipsec add show_rx
IPSEC DEL
Deletes an existing IPSec security association (SA) name.
ipsec del <SAname>
SAname Name for the IPSec SA to be deleted.To see the IPSec SA names in use, use the ipsec list
command.
Example: ipsec del show_rx
IPSEC DISABLE
Disables a defined IPSec SA entry.
ipsec disable <SAname>
SAname Name for the IPSec SA to be disabled.To see the IPSec SA names in use, use the ipsec list
command.
Example: ipsec disable show_rx