User guide

Chapter 5. Command Line Interface Reference 261
IKE PROPOSALS SET SESSION_AUTH
Sets the IKE proposal parameter that specifies the session authentication; preshared key is currently the only
option. For more information on IKE proposals, see IKE Management, on page 121.
ike proposals set session_auth <PRESHARE> <ProposalName>
PRESHARE Preshared key.
ProposalName Name of the IKE proposal to which the session authentication parameter is added. To see
the proposal names in use, use the ike proposals list command.
Example: ike proposals set session_auth preshare my_ike_proposal
IPSec Commands
The following commands allow you to define an IPSec connection without IKE. To read about IPSec Security,
see IPSec (Internet Protocol Security), on page 119.
Note: If you define a tunnel using IPSec commands, the keys will remain static. This could pose a security risk
and is not recommended. Use of IKE for key management is recommended.
IPSEC ADD
Defines an IPSec security association (SA) name.
ipsec add <SAname>
SAname Name for the new IPSec SA.To see the IPSec SA names in use, use the ipsec list command.
Example: ipsec add show_rx
IPSEC DEL
Deletes an existing IPSec security association (SA) name.
ipsec del <SAname>
SAname Name for the IPSec SA to be deleted.To see the IPSec SA names in use, use the ipsec list
command.
Example: ipsec del show_rx
IPSEC DISABLE
Disables a defined IPSec SA entry.
ipsec disable <SAname>
SAname Name for the IPSec SA to be disabled.To see the IPSec SA names in use, use the ipsec list
command.