User guide

Chapter 5. Command Line Interface Reference 251
IKE IPSEC POLICIES SET PROPOSAL
Defines a proposal filtering parameter value for the policy. The proposal parameter specifies an IKE IPSec
proposal that may be used for the connection. (It must have been defined by IKE IPSec proposal commands; see
IKE IPSec Proposal Commands, on page 125.)
Unlike the other filtering parameters, the policy may allow more than one value for the proposal parameter. For
example, two set proposal commands could specify two proposals, either of which could be used by the
connection. See IKE IPSec Policy Commands, on page 127.
ike ipsec policies set proposal <ProposalName> <PolicyName>
ProposalName Name of an IKE proposal. To see the IKE proposal names, use the ike proposals list
command.
PolicyName Name of the IPsec policy to which the proposal parameter value is added. To see the policy
names, use the ike ipsec policies list command.
Example: ike ipsec policies set proposal myproposal mypolicy
IKE IPSEC POLICIES SET PROTOCOL
Defines a protocol filtering parameter value for the policy. The protocol parameter requires a specific protocol
that must be used or allows any protocol (*).
ike ipsec policies set protocol <ProtocolNumber | TCP | UDP | *> <PolicyName>
ProtocolNumber Protocol required by the policy. The protocol can be specified by number or by name
TCP (TCP or UDP). To allow data through for any protocol, specify an asterisk (*).
UDP
*
PolicyName Name of the IPsec policy to which the protocol parameter value is added. To see the
policy names, use the ike ipsec policies list command.
Example: ike ipsec policies set protocol * mypolicy
ike ipsec policies set protocol tcp webpolicy
IKE IPSEC POLICIES SET SOURCE
Defines a source filtering parameter value for the policy. The source parameter requires the data come from the
specified source IP address and mask. The source is the device or network that sent the packet, not the router that
routes the packet.
ike ipsec policies set source <IPaddress> <IPmask> <PolicyName>
IPaddress IP address allowed to be the source of the data (4 decimals separated by periods).
IPmask IP network mask (4 decimals separated by periods).
PolicyName Name of the IPsec policy to which the source parameter value is added. To see the policy
names, use the ike ipsec policies list command.
Example: ike ipsec policies set source 192.168.16.0 255.255.255.0 mypolicy