Allied Telesis AR2050V, Справочник по командам, Страница: 2692 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2692
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
CRYPTO IPSEC PROFILE
crypto ipsec profile
Overview Use this command to configure a custom IPsec profile.
An IPsec profile comprises one or more transforms that can be configured by using
the
transform (IPsec Profile) command.
Use the no variant to delete a previously created profile.
Syntax crypto ipsec profile < profile_name >
no crypto ipsec profile < profile_name >
Default The default IPsec profile with transforms in order of preference is listed in the
following table. Which IPsec profile will actually be used depends on how the
negotiation between the peers is carried out when establishing the connection.
Note that you cannot delete or edit the default profile. Expiry time of 8 hours
applies to the default IPsec profile.
Mode Global Configuration
Examples To configure a custom IPsec profile for establishing IPSec SAs with a remote peer,
use the following commands:
awplus# configure terminal
awplus(config)# crypto ipsec profile my_profile
awplus(config-ipsec-profile)# transform 2 protocol esp
integrity sha1 encryption 3des
To delete a custom profile, use the following commands:
awplus# configure terminal
awplus(config)# no crypto ipsec profile my_profile
Parameter Description
< profile_name >
Profile name. Profile names are case insensitive and can be up to
64 characters long composed of printable ASCII characters.
Profile names can have only letters from a to z and A to Z,
numbers from 0 to 9, - (dash), or _ (underscore).
Table 61-1: IPsec default profile
Attribute Transform 1 Transform 2 Transform 3 Transform 4 Transform 5 Transform 6
Protocol ESP ESP ESP ESP ESP ESP
Encryption
(all CBC) AES256 AES256 AES128 AES128 3DES 3DES
Integrity
(all HMAC) SHA256 SHA1 SHA256 SHA1 SHA256 SHA1