Nortel 252, Configuration

Page: 286 / 345

286 Appendix G Command Interpreter
NN47923-501
nailUp <Yes|No>
Turns nailed up feature on or off.
activeProtocol <0:AH | 1:ESP>
Sets the protocol.
p2MultiPro <Yes|No>
Turns phase 2 multiple proposal on or off.
p2EncryAlgo <0:Null | 1:DES
| 2:3DES |
3:AES>
Sets the phase 2 encryption algorithm.
p2EncryKeyLen <0:128 | 1:192
| 2:256>
Sets the phase 2 encryption key length
(with AES encryption).
p2AuthAlgo <0:MD5 |
1:SHA1>
Sets the phase 2 authentication
algorithm.
p2SaLifeTime <seconds>
Sets the phase 2 SA lifetime.
encap <0:Tunnel |
1:Transport>
Sets the encapsulation mode.
pfs <0:None | 1:DH1
| 2:DH2>
Sets Perfect Forward Secrecy.
antiReplay <Yes | No>
Turns replay detection on or off.
connType <0:Branch
Office |
1:Contivity
Client>
Specifies whether the rule is for a branch
office or Contivity Client VPN connection.
authOptions <0:Username
Password |
1:Group ID &
Password
Sets the Business Secure Router to
either send just the username and
password to the remote Contivity IPSec
router, or a group ID and password as
well.
onDemand <on | off>
Sets whether or not outgoing packets can
automatically trigger a VPN connection to
the remote Contivity IPSec router.
ODService [netbios] [ntp]
[none]...
Sets which specific services can
automatically trigger a VPN connection to
the remote Contivity IPSec router.
groupID <group ID>
Sets the Contivity Client tunnel’s user’s
group ID.
groupPasswd <group
password>
Sets the Contivity Client tunnel’s user’s
group password.
username <name>
Sets the Contivity Client tunnel’s user’s
username.
password <password>
Sets the Contivity Client tunnel’s user’s
password.
Table 68 IPSec commands
Command Description