Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 793 / 1193

IPsec VPN Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
767
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
T
O
C
ONFIGURE
A
UTHENTICATION
T
YPE
E
XAMPLE
ALU(config-crypto-ike-policy-P1)# authentication pre-shared
Note: If the Authentication type is not explicitly configured, default pre-shared is used.
T
O
C
ONFIGURE
T
RANSFORM
-
SET IN
IP
SEC
A transform set represents a certain combination of security protocols and
algorithms. During the IPsec security association negotiation, the peers agree to
use a particular transform set for protecting a particular data flow.
Note: You can specify a maximum of 4 values in a transform set.
Note: The “force“ keyword is used to modify or edit the transform-set in use.
Options for proposal under transform-set:
•
esp-md5-3des encapsulation with MD5 and 3DES encryption
•
esp-md5-aes128 encapsulation with MD5 and 128 bit AES encryption
•
esp-md5-aes192 encapsulation with MD5 and 192 bit AES encryption
•
esp-md5-aes256 encapsulation with MD5 and 256 bit AES encryption
•
esp-md5-des encapsulation with MD5 and 56 bit DES encryption
•
esp-sha1-3des encapsulation with SHA1 and 3DES encryption
•
esp-sha1-aes128 encapsulation with SHA1 and 128 bit AES encryption
•
esp-sha1-aes192 encapsulation with SHA1 and 192 bit AES encryption
•
esp-sha1-aes256 encapsulation with SHA1 and 256 bit AES encryption
•
esp-sha1-des encapsulation with SHA1 and 56 bit DES encryption
Command (in IKE Policy CM) Description
authentication { pre-shared | rsa-sig }
This command configures the
authentication type to be used
during IKE negotiation.
Command (in CM) Description
crypto ipsec transform-set <name>
{< algo >[< algo >][< algo >] [< algo >]}
[ force ]
This command creates a
transform-set.