Enterasys X-Pedition XSR, Cli Reference Manual

Page: 517 / 684

Other ADSL Commands
XSR CLI Reference Guide 13-91
Default
Disabled by default. When enabled, all operational parameters must be specified.
Example
The following example configures a sub ‐ interface backup with a Dialer ID of 1, delay of 20
seconds before switching to the backup, and a delay of 10 seconds before switching back to the
ATM sub ‐ interface. The example also configures the sub ‐ interface to switch to the backup line at
8:30 P.M. then switch back to the normal interface at 9:50 P.M. :
XSR(config-if<ATM0/1/0.1>)#backup interface Dialer1
XSR(config-if<ATM0/1/0.1>)#backup delay 20 10
XSR(config-if<ATM0/1/0.1>)#backup time-range 20:30 21:50
crypto
This command enables and configures the DF ‐ bit VPN parameter on this ATM sub ‐ interface. This
command requires a properly configured ATM sub ‐ interface.
Syntax
crypto { ezipsec | ipsec df-bit { clear | copy | set }| map [ map-name ]}
Syntax of the “no” Form
This command’s no disables the specified DF ‐ bit setting:
no crypto { ezipsec | ipsec df-bit }| map [ map-name ]}
Mode
ATM Sub ‐ Interface configuration: XSR(config-if<ATM x / x / x . x >)#
Default
Disabled
Example
The following example enables EZ ‐ IPSec with the option of having the XSR look in the original
packet for the outer DF bit setting. This example also attaches the crypto map ets ‐ vpn :
ezipsec
EZ ‐ IPSec automatic configuration enabled.
ipsec df-bit
IPSec enabled with the following DF ‐ bit options:
clear
The outer IP header clears the DF bit and the XSR may fragment the packet
to add IPSec encapsulation.
copy
XSR searches the original packet for the outer DF ‐ bit setting.
set
The outer IP header has the DF ‐ bit set; but, the XSR may fragment the
packet if the original packet cleared the DF ‐ bit.
map-name
Attaches a crypto map to the interface and name (optional).