ZyXEL Communications UAG Series, Reference Manual

Page: 202 / 361

Chapter 40 IPSec VPN
UAG CLI Reference Guide
202
40.2.3 IPSec SA Commands (for Manual Keys)
This table lists the additional commands for IPSec SAs using manual keys (VPN connections using
manual keys).
40.2.4 VPN Concentrator Commands
This table lists the commands for the VPN concentrator.
Table 123
crypto map Commands: IPSec SAs (Manual Keys)
COMMAND DESCRIPTION
crypto map map_name
Creates the specified IPSec SA if necessary and enters sub-command
mode. The
no
command deletes the specified IPSec SA.
set session-key {ah <256..4095>
auth_key | esp <256..4095> [cipher
enc_key ] authenticator auth_key }
Sets the active protocol, SPI (<256..4095>), authentication key and
encryption key (if any).
auth_key
: You can use any alphanumeric characters or
,;|`~!@#$%^&*()_+\{}':./<>=-"
. The length of the key depends on
the algorithm.
md5 - 16-20 characters
sha - 20 characters
sha256 - 32 characters
sha512 - 64 characters
enc_key
: You can use any alphanumeric characters or
,;|`~!@#$%^&*()_+\{}':./<>=-"
. The length of the key depends on
the algorithm.
des - 8-32 characters
3des - 24-32 characters
aes128 - 16-32 characters
aes192 - 24-32 characters
aes256 - 32 characters
If you want to enter the key in hexadecimal, type “0x” at the beginning
of the key. For example, "0x0123456789ABCDEF" is in hexadecimal
format; in “0123456789ABCDEF” is in ASCII format. If you use
hexadecimal, you must enter twice as many characters.
The UAG automatically ignores any characters above the minimum
number of characters required by the algorithm. For example, if you
enter
1234567890XYZ
for a DES encryption key, the UAG only uses
12345678
. The UAG still stores the longer key.
local-ip ip
Sets the local gateway address to the specified IP address.
peer-ip ip
Sets the remote gateway address to the specified IP address.
Table 124
vpn-concentrator Commands: VPN Concentrator
COMMAND DESCRIPTION
show vpn-concentrator [ profile_name ]
Shows the specified VPN concentrator or all VPN concentrators.
[no] vpn-concentrator profile_name
Creates the specified VPN concentrator if necessary and enters sub-command
mode. The
no
command deletes the specified VPN concentrator.