THOMSON SpeedTouch 608, Справочное руководство CLI

Страница: 252 / 490

250
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
EXAMPLE:
=>ipsec show
VPN Status : running
module traces disabled
NAT detection disabled
Descriptors
===========
IKE_3DES
(IKE) : "identity 3des sha1 minutes 60 dhgroup 2 OR identity
3des md5 minutes 60 dhgroup 2"
IKE_AES
(IKE) : "identity aes sha1 minutes 60 dhgroup 2 OR identity a
es md5 minutes 60 dhgroup 2"
IKE_AES_3DES
(IKE) : "identity aes sha1 minutes 60 dhgroup 2 OR identity 3
des sha1 minutes 60 dhgroup 2"
IKE_AES_Adv
(IKE) : "identity aes keylength 256 sha1 minutes 1440 dhgroup
5"
IKE_AGGR_AES (IKE) : "aggressive aes sha1 minutes 60 dhgroup 2 OR aggressi
ve aes md5 minutes 60 dhgroup 2"
IKE_DES
(IKE) : "identity des sha1 minutes 60 dhgroup 1 OR identity d
es md5 minutes 60 dhgroup 1"
AH
(IPSEC) : "ah hmac sha1 minutes 1440"
ESP_3DES (IPSEC) : "esp 3des hmac sha1 minutes 1440 OR esp 3des hmac md5
minutes 1440"
ESP_3DES_PFS (IPSEC) : "pfs dhgroup 2 esp 3des hmac sha1 minutes 1440 OR esp
3des hmac md5 minutes 1440"
ESP_AES (IPSEC) : "esp aes hmac sha1 minutes 1140 OR esp aes hmac md5 m
inutes 1440"
ESP_AES_3DES
(IPSEC) : "esp aes hmac sha1 minutes 1440 OR esp 3des hmac sha1
minutes 1440"
ESP_AES_Adv (IPSEC) : "pfs dhgroup 5 esp aes keylength 256 hmac sha1 minute
s 1440"
ESP_AES_PFS
(IPSEC) : "pfs dhgroup 2 esp aes hmac sha1 minutes 1440 OR esp
aes hmac md5 minutes 1440"
ESP_DES
(IPSEC) : "esp des hmac sha1 minutes 1440 OR esp des hmac md5 m
inutes 1440"
ESP_NullEnc
(IPSEC) : "esp null hmac sha1 minutes 1440"
Peers
=====
Connections
===========
Policy rules
================
:ipsec policy assign hook=input chain="_auto_in"
:ipsec policy assign hook=output chain="_auto_out"
Secure storage
==================
Certificate services have not been logged into.
CRL configuration
=================
CRL Checking
: disabled
Use expired : disabled
URL :
FetchDynamic : disabled
Use cert ext : disabled
Timechecks : enabled
Net timeout : 10 seconds
CRL HTTP proxy : disabled
=>