Patton electronics IPLink Series, Software Configuration Manual, Page: 14 / 331

14
IPLink Software Configuration Guide Table of Contents
Transport and tunnel modes .........................................................................................................................289
Key management ..........................................................................................................................................289
VPN configuration task list .................................................................................................................................289
Creating an IPsec transformation profile .......................................................................................................289
Creating an IPsec policy profile .....................................................................................................................290
Creating/modifying an outgoing ACL profile for IPsec .................................................................................292
Configuration of an IP interface and the IP router for IPsec .........................................................................293
Displaying IPsec configuration information ..................................................................................................293
Debugging IPsec ...........................................................................................................................................294
Key Management (IKE) ......................................................................................................................................295
Main differences between manual & IKE IPSEC configurations .............................................................295
Creating an IPSEC transform profile ......................................................................................................296
Creating an ISAKMP transform profile ...................................................................................................296
Creating an ISAKMP IPSEC policy profile .............................................................................................296
Creating/modifying an outgoing ACL profile for IPSEC .........................................................................298
Configuration of an IP interface and the IP router for IPSEC .................................................................298
Policy matching ......................................................................................................................................298
Sample configuration snippet ..................................................................................................................298
Troubleshooting ...........................................................................................................................................299
Using an alternate source IP address for specific destinations ...................................................................299
Sample configurations .........................................................................................................................................300
IPsec tunnel, DES encryption .......................................................................................................................300
IPLink configuration ...............................................................................................................................300
Cisco router configuration ......................................................................................................................301
IPsec tunnel, AES encryption at 256 bit key length, AH authentication with HMAC-SHA1-96 ..................301
IPLink configuration ...............................................................................................................................301
Cisco router configuration ......................................................................................................................302
IPsec tunnel, 3DES encryption at 192 bit key length, ESP authentication with HMAC-MD5-96 ................302
IPLink configuration ...............................................................................................................................302
Cisco router configuration ......................................................................................................................302
A Terms and definitions .................................................................................................................................304
Introduction ........................................................................................................................................................305
IPLink software architecture terms and definitions ..............................................................................................305
B Mode summary ...........................................................................................................................................309
Introduction ........................................................................................................................................................310
C Command summary ....................................................................................................................................313
Introduction ........................................................................................................................................................314
Summary .............................................................................................................................................................315
operator_exec ................................................................................................................................................315
administrator_exec ........................................................................................................................................315
configure .......................................................................................................................................................317
radius-client ..................................................................................................................................................318
profile_acl .....................................................................................................................................................318