Product specifications

Chapter 12: IKE/IPsec Commands Efficient Networks

Router family

Command Line Interface Guide

Page 12-14 Efficient Networks

Parameters

Examples

Response

Command prompt.

ike ipsec policies set mode

Defines the mode filtering parameter value for the policy. The mode parameter

specifies the encapsulation mode (tunnel or transport) that may be used for the

connection (see “Transport and Tunnel Encapsulation Modes” on page 5-50.) If no

value is set for the mode parameter, tunnel mode is assumed.

Mgmt Class

Security (R/W)

Input Format

ike ipsec policies set mode <tunnel | transport> <policyname>

ASCII string

Interface that must be connected when the policy is used. This is

usually referenced by a remote name, although it could be another

interface such as “ethernet/0”. If no interface restriction is to be set

for this policy, specify the string all.

Name of the IPsec policy to which the interface parameter value is

added.

To see the policy names, use the ike ipsec policies list command.

This command requires that, when the remote interface backup comes up, IKE is

enabled for packets described by policy corporate. The specified interface (back-

up) must be the interface to the IKE peer.

-> ike ipsec policies set interface backup corporate

This command specifies that IKE is enabled for packets described by policy my-

policy regardless of the interface the peer is on.

-> ike ipsec policies set interface all mypolicy