D-Link DSR-250, Cli Reference Manual

Page: 72 / 83

Unified Services Router CLI Reference Guide
70
Sl No Command Name Description Type and Description
entire subnet, or any IP address that
wants to connect.
19
general_remote_st
art_address
IP address from where the range needs
to begin IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
20
general_remote_en
d_address
IP address where the range needs to
end IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
21
general_remote_su
bnet_mask
Subnet mask of the subnet used
IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
22
auto_phase1_excha
nge_mode
Main mode negotiates the tunnel with
higher security, but is slower whereas
Aggressive mode establishes a faster
connection. Exchange mode type,
(Main/Aggressive)
23
auto_phase1_direc
tion_type
The connection methods for this router
can be one of the selected Direction type,
(Initiator/Responder/Both)
24
auto_phase1_enabl
e_nat_traversal
Set NAT traversal to 'On' if you expect
any Network Address Translation (NAT)
to occur during IPsec communication. If
not set this option to Off. Nat Traversal Boolean Choice
(Y/N)
25
auto_phase1_nat_k
eepalive_frequecy
When NAT traversal is set to 'On', use
this option to control the keep-alive-
frequency value. Keep-alive packets
are sent at the mentioned time interval
and these are used to keep the NAT
mappings alive on the NAT device.
Setting this value to 0 disables this
feature. Unsigned integer
26
auto_phase1_local
_identtype
The ISAKMP identifier for this router The ISAKMP identifier for this
router (IP/FQDN/User FQDN/DER
ASN1 DN) (Local-Wan-
IP/FQDN/User-FQDN/DE
R-ASN1-DN)
27
auto_phase1_local
_identifier
The value of the respective option
chosen in the Identifier Type
The value of the respective option
chosen in the Identifier Type
28
auto_phase1_remot
e_identtype
The ISAKMP identifier for the remote
device The ISAKMP identifier for the
remote device. (IP/FQDN/User
FQDN/DER ASN1 DN) (Local-
Wan-IP/FQDN/User
-FQDN/DER-ASN1-DN)
29
auto_phase1_remot
e_identifier
The value of the respective option
chosen in the Identifier Type The value of the respective option
chosen in the Identifier Type
30
auto_phase1_encry
ption_algorithm
The algorithm used to negotiate the SA.
There are four algorithms supported by
this router: DES, 3DES, AES-128, AES-
192.AES-256/BLOWFISH/CAST128 (None/DES/3DES/AES-128/AES-
192/AES-256
/BLOWFISH/CAST128)