ACM VPN Configuration
Rev 3 Nov 17
37
4119855
Important:
Make sure to set a higher priority for the master ACM than the priorities for all
backup ACMs.
7.
Add the VRRP group on eth1 to the sync group:
set interfaces ethernet eth1 vrrp vrrp-group
<VRRP GROUP #> sync-group <SYNC GROUP NAME>
8.
Commit the configuration:
commit
9.
Display the configuration (optional):
show interfaces ethernet eth1 vrrp
AirLink oMG/MG90 Router Support
This section applies to AirLink oMG2000/500 and MG90. For AirLink LS, ES, and
GX series gateways, and MP series routers, see
oMG/MG90 IKE/ESP Negotiation Parameters
When using oMG/MG90 peers with the ACM, some limitations apply:
•
Some ACM features are not supported by oMG/MG90.
•
Some oMG/MG90 features are not supported by ACM.
The following table describes these limitations and the restrictions these place on
ACM configuration and oMG/MG90 configuration.
Table 5-3: oMG / MG90 IKE / ESP Parameter Support
Type
ACM 1.6
oMG
MG90
Setup
Requirements
non-FIPS
FIPS
non-FIPS
FIPS
non-FIPS
FIPS
a
IKE
ESP
IKE
ESP
IKE
ESP
IKE
ESP
IKE
ESP
IKE
ESP
Encryption
aes128
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
aes128ccm16
Y
b
aes128gcm16
Y
aes256
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
aes256ccm16
aes256gcm16
3des
Y
Y
Y
Y
Y
Y