Release 1.0
Configuring PacketCable
526360-001-00 Rev. B
MGBI
7-19
ipAddr
{
-ipAddr2
|
:ipMask
} is the source network IP address followed by a
colon and subnetwork mask. If a hyphen is used between ipAddr and
ipAddr2, this specifies a range of source network IP addresses.
ipAddr
{
-ipAddr2
|
:ipMask
} is the destination network IP address followed by
a colon and subnetwork mask. If a hyphen is used between ipAddr and
ipAddr2, this specifies a range of destination network IP addresses.
num
is the transport protocol number which is the IP protocol from the IP
protocol header. The format is a decimal number. A value of “0” represents
any protocol. For example, the Call Management Server/Gate Controller or
Call Management Server/Policy Server can use TCP Port 6 and the Record
Keeping Server can use UDP Port 17.
0-65535 is the source
TCP/UDP
port number
. “0” represents any port.
0-65535 is the destination
TCP/UDP
port number
. “0” represents any port.
apply transport
is used if the packet matches the rule for this policy (i.e.,
ipAddr
,
ipAddr2
, num, source port, or destination port matches the packet
being processed), then apply transport mode IPSEC to the IP Packet.
bypass
is used if the packet matches the rule for this policy (i.e.,
ipAddr
,
ipAddr2
,
num
, source port, or the destination port matches the packet being
processed), then the IPSEC processing is bypassed and the IP packet is
processed.
discard
is used if the packet matches the rule for this policy (i.e.,
ipAddr
,
ip
Addr2
,
num
, source port, or dest port matches the packet being processed),
then discard this IP packet.
after
optionally allows a rule to be inserted after an existing rule in the SPD.
If the
after
is not present, the new rule is added to the first index.
num
is the policy security entry number. The index numbering begins at “1”.
3.
Issue the
spd policy bypass
command to specify the default bypass policy to
allow a non-protected date to pass:
MOT(config-ipsec)#
spd policy 0.0.0.0-255.255.255.255 0.0.0.0-
255.255.255.255 0 0 0 bypass
4.
Issue the
show ipsec spd policy
command to verify if SPD policy is configured
correctly.
Содержание BSR 2000
Страница 1: ...BSR 2000 Configuration and Management Guide 526360 001 00 Rev B Release 1 0 MGBI ...
Страница 6: ... Motorola Motorola Motorola Motorola Motorola Motorola Motorola Motorola Motorola ...
Страница 50: ......
Страница 130: ......
Страница 164: ......
Страница 458: ......
Страница 490: ......
Страница 580: ......
Страница 632: ......
Страница 648: ......
Страница 649: ......
Страница 650: ...526360 001 00 Rev B 7 06 MGBI Visit our website at www motorola com ...