Check Point SMB 1500 Series, Reference Manual, Page: 1225 / 1401

set vpn
SMB 1500 Appliance Series R80.20.05 CLI Reference Guide | 1225
Parameter Description
is-site-behind-
static-nat When connection type is IP address, this indicates if it is behind static NAT
link-selection-
primary-addr Specifies The primary IP address for the link selection
Type: A string of alphanumeric characters without space between them
link-selection-
probing-method The type of probing used for link selection when multiple IP addresses are
configured for the remote site
Options: ongoing, one-time
match-cert-dn Indicates if certificate matching should match the DN string in the certificate to the
configured DN string Type: Boolean (true/false)
match-cert-dn-
string Indicates the configured DN string for certificate matching
Type: String
match-cert-e-
mail Indicates if certificate matching should match the E-mail string in the certificate to
the configured E-mail string
Type: Boolean (true/false)
match-cert-e-
mail-string Indicates the configured E-mail string for certificate matching
Type: Email address
match-cert-ip Indicates if certificate matching should match IP address in the certificate to the
site's IP address
Type: Boolean (true/false)
name Site name
Type: A string that begins with a letter and contains up to 32 alphanumeric (0-9, a-
z, _ -) characters without spaces
password Preshared secret (minimum 6 characters) to be used when authentication method
is configured as such
Type: vpnPassword
phase1-reneg-
interval The period, in minutes, between each IKE SA renegotiation
Type: A number with no fractional part (integer)
phase2-dh Determine the strength of the key used for the IPsec (Phase 2) key exchange
process. The higher the group number, the stronger and more secure the key is.
phase2-reneg-
interval The period, in seconds, between each IPSec SA renegotiation
Type: A number with no fractional part (integer)