KeeNetic EXTRA KN-1710, Command Reference Manual

Page: 67 / 354

Example
(config-crypto-map)> force-encaps
IpSec::Manager: "test": crypto map force ESP in UDP encapsulation ►
enabled.
(config-crypto-map)> no force-encaps
IpSec::Manager: "test": crypto map force ESP in UDP encapsulation ►
disabled.
History
Version Description
The crypto map force-encaps command has been
introduced.
2.08
3.16.5 crypto map match-address
Description Set the reference to existing list of packet filtering rules (see access-list
command). The first rule in the list will be used for IPsec Phase 2.
Command with no prefix removes the reference.
Prefix no Yes
Change settings Yes
Multiple input No
Synopsis
(config-crypto-map)>
match-address
‹
access-list
›
(config-crypto-map)>
no match-address
Arguments
Description Value Argument
Packet filtering rules list name. You
can see the list of available lists
String access-list
with help of match-address ?
command.
Example
(config-crypto-map)> match-address acl1
IpSec::Manager: Crypto map "test" match-address set to "acl1".
History
Version Description
The crypto map match-address command has been
introduced.
2.06
3.16.6 crypto map nail-up
Description Enable automatic renegotiation of IPsec ESP transformations at their
obsolescence. By default, setting is disabled.
Keenetic Extra (KN-1710) — Command Reference Guide
67
Chapter 3 Command Reference