Product specifications

Chapter 12: IKE/IPsec Commands Efficient Networks
®
Router family
Command Line Interface Guide
Page 12-2 Efficient Networks
®
ike ipsec policies set peer Defines a peer filtering parameter value for the pol-
icy.
ike ipsec policies set pfs Defines the pfs filtering parameter value for the
policy.
ike ipsec policies set pro-
posal
Defines a proposal filtering parameter value for the
policy.
ike ipsec policies set proto-
col
Defines a protocol filtering parameter value for the
policy.
ike ipsec policies set
source
Defines a source filtering parameter value for the
policy.
ike ipsec policies set sour-
ceport
Defines a source port filtering parameter value for
the policy.
ike ipsec policies set trans-
late
Defines a translate filtering parameter value for the
policy.
ike ipsec proposals add Defines the name of an IKE IPSec proposal.
ike ipsec proposals delete Deletes an existing IKE IPSec proposal.
ike ipsec proposals list Lists the IPSec proposals.
ike ipsec proposals set ah-
auth
Sets the proposal parameter that determines
whether AH message authentication is requested
and, if it is requested, the hash algorithm used.
ike ipsec proposals set es-
pauth
Sets the proposal parameter that determines
whether ESP message authentication is requested
and, if it is requested, the hash algorithm used.
ike ipsec proposals set es-
penc
Sets the proposal parameter that determines
whether ESP encryption is requested and, if it is re-
quested, the encryption method used.
ike ipsec proposals set ip-
comp
Sets the proposal parameter that requests either
no compression or LZS compression.
ike ipsec proposals set life-
data
Sets the proposal parameter that specifies the
maximum number of kilobytes for the IPSec Secu-
rity Authentication (SA).
ike ipsec proposals set life-
time
Sets the proposal parameter that specifies the
length of time (in seconds) before the IPSec Secu-
rity Authentication (SA) expires.
ike peers add Defines the name of a new IKE peer.
ike peers delete Deletes an existing IKE peer entry.
Table 12-1: Internet Key Exchange Command Listing (Cont.)
Command Function