DryTek Vigor 2952 series, Руководство пользователя

Страница: 748 / 811

Vigor2952 Series User’s Guide 736
You have set system VLAN ID to range: 200 ~ 263,
We recommend that you reboot the system now.
> vlan sysvid show
The system VLAN ID is in range: 200 ~ 263
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
v
v
p
p
n
n
l
l
2
2
l
l
s
s
e
e
t
t
This command allows users to set advanced parameters for LAN to LAN function.
S
S
y
y
n
n
t
t
a
a
x
x
vpn l2lset [list index] peerid [peerid]
vpn l2lset [list index] localid [localid]
vpn l2lset [list index]main [auto/proposal index]
vpn l2lset [list index] aggressive [g1/g2]
vpn l2lset [list index]pfs [on/off]
vpn l2lset [list index] phase1[lifetime]
vpn l2lset [list index] phase2[lifetime]
S S y y n n t t a a x x D D e e s s c c r r i i p p t t i i o o n n
Parameter Description
list index It means the index number of L2L (LAN to LAN) profile.
peerid It means the peer identity for aggressive mode.
localid It means the local identity for aggressive mode.
main It means to choose proposal for main mode.
auto index It means to choose default proposals.
proposal index It means to choose specified proposal.
aggressive It means the chosen DH group for aggressive mode
pfs It means “perfect forward secrete”.
on/off It means to turn on or off the PFS function.
phase1 It means phase 1 of IKE.
lifetime It means the lifetime value (in second) for phase 1 and phase 2.
phase2 It means phase 2 of IKE.
E
E
x
x
a
a
m
m
p
p
l
l
e
e
> VPN l2lset 1 peerid 10226
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
v
v
p
p
n
n
d
d
i
i
n
n
s
s
e
e
t
t
This command allows users to configure setting for remote dial-in VPN profile.
S
S
y
y
n
n
t
t
a
a
x
x
vpn dinset <list index>
vpn dinset <list index> <on/off>
vpn dinset <list index> motp <on/off>
vpn dinset <list index> pin_secret <pin> <secret>