Freedom9 freeGuard 100, Руководство по интерфейсу командной строки

Страница: 264 / 310

freeGuard 100 CLI User Manual
257
set localspi 1000ff
set remotespi 2000ff
set gateway 206.37.33.45
set encryption 3des
set enckey 003f2b01a9002f3b-004f4b0209003f01-3b00f23bff003eff
set authentication md5
set authkey ff003f012ba900bb-00f402303f0100ff
end
This example shows how to display the settings for the vpn ipsec manualkey command.
get vpn ipsec manualkey
This example shows how to display the settings for the Manual_tunnel manual key configuration. get
vpn ipsec manualkey Manual_Tunnel
This example shows how to display the configuration for the vpn ipsec manualkey command.
show vpn ipsec manualkey
Related Commands
• config vpn ipsec phase2
12.3 ipsec phase1
Use this command to add or edit IPSec phase 1 configurations.
When you add a phase 1 configuration, you define how the freeGuard 100 and a remote VPN peer
(gateway or client) authenticate themselves to each other as part of establishing an IPSec VPN tunnel.
The phase 1 configuration specifies the name of a remote VPN peer, the nature of the connection
(static IP, dialup, or dynamic DNS), the encryption and authentication keys for the phase 1 proposal,
and the authentication method (preshared key or certificate). For authentication to be successful, the
freeGuard 100 and the remote VPN peer must be configured with compatible phase 1 settings.
You can change all settings except the type setting after you define the configuration: if the address
type of a remote peer changes, you must delete the original phase 1 configuration and define a new
one. As a general rule, create only one phase 1 configuration per remote VPN peer.
Command syntax pattern
config vpn ipsec phase1
edit <name_str>