Digi TransPort LR54-AA401, Руководство пользователя

Страница: 117 / 169

Command descriptions
TransPort LR User Guide 164
ike
The Internet Key Exchange (IKE) version to use for this IPsec tunnel.
Accepted value is any integer from 1 to 2. The default value is 1.
ike-mode
The IKEv1 mode to use for this IPsec tunnel.
Accepted values can be one of main or aggressive. The default value is main.
ike-encryption
The IKE encryption type for this IPsec tunnel.
Accepted values can be multiple values of aes128, aes192 and aes256. The default value is aes128.
ike-authentication
The IKE authentication type for this IPsec tunnel.
Accepted values can be multiple values of sha1 and sha256. The default value is sha1.
ike-diffie-hellman
The IKE Diffie-Hellman group for this IPsec tunnel. Diffie-Hellman is a public-key cryptography
protocol for establishing a shared secret over an insecure communications channel. Diffie-Hellman is
used with Internet Key Exchange (IKE) to establish the session keys that create a secure channel.
Accepted values can be multiple values of group5, group14, group15, group16, group17 and group18.
The default value is group14.
ike-lifetime
The lifetime for the IKE key, in seconds.
Accepted value is any integer from 180 to 4294967295. The default value is 4800.
ike-tries
The number of attempts to negotiate this IPsec tunnel before failing.
Accepted value is any integer from 0 to 100. The default value is 3.
dpddelay
Dead peer detection transmit delay.
Accepted value is any integer from 1 to 3600. The default value is 30.
dpdtimeout
Timeout, in seconds, for dead peer detection.
Accepted value is any integer from 1 to 3600. The default value is 150.
dpd
Enables or disables dead peer detection. Dead Peer Detection (DPD) is a method of detecting a dead
Internet Key Exchange (IKE) peer. The method uses IPsec traffic patterns to minimize the number of
messages required to confirm the availability of a peer.
Value is either on or off. The default value is off.