THOMSON SpeedTouch 608, Справочное руководство CLI

Страница: 280 / 490

278
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
EXAMPLES:
Example of a Phase 1 ISAKMP security descriptor:
Example of a Phase 2 IPSec security descriptor:
Example of a Phase 2 IPSec security descriptor with several OR statements:
Example of a Phase 2 IPSec security descriptor with mixed AND and OR statements:
Note
The example above shows the priority of AND above OR: the descriptor specifies the use of ESP DES and
AH HMAC SHA1, either with or without LZS, but preferably without.
Example showing the default Phase 1 and Phase 2 security descriptors:
RELATED COMMANDS:
=>ipsec descriptor add
name=DESC_Test
phase=IKE
value=IDENTITY AES MD5 DHGROUP 2 MINUTES 300 or 3DES SHA1 DHGROUP 2 MINUTES 300
=>
=>ipsec descriptor add
name=DESC_Test1
phase=IPSEC
value=ESP AES HMAC MD5 MINUTES 300
=>
=>ipsec descriptor add
name=DESC_Test2
phase=IPSEC
value=ESP DES HMAC MD5 MINUTES 3600
or ESP DES HMAC SHA1 MINUTES 3600
or ESP AES HMAC MD5 MINUTES 3600
=>
=>ipsec descriptor add
name=DESC_Test3
phase=IPSEC
value=ESP DES
and AH HMAC SHA1
or ESP DES
and AH HMAC SHA1
and IPCOMP LZS
=>
=>ipsec descriptor list
def_ike
(IKE) : "identity 3des sha1 minutes 60 dhgroup 1"
def_auth (IPSEC) : "esp null hmac md5 minutes 1440"
def_encrypt(IPSEC) : "esp aes hmac md5 minutes 60 or esp 3des hmac md5 minutes 60"
=>
ipsec descriptor delete Delete a security descriptor.
ipsec descriptor list Show a list of available security descriptors.