THOMSON SpeedTouch 608, Справочное руководство CLI

Страница: 271 / 490

269
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
ipsec connection config
Configure an existing VPN connection profile. Before being able to configure a profile, it must be added via the
command
ipsec connection add
.
SYNTAX:
where:
ipsec connection config conn = <>
[peer = <>]
[localrange = <ip-range>]
[remoterange = <ip-range>]
[descriptor = <{def_auth|def_encrypt}>]
conn The name of the VPN connection profile to configure. REQUIRED
peer The name of the peer gateway profile the VPN connection must use.
Use the command
ipsec peer list
for available peer gateway profiles.
OPTIONAL
localrange The range of IP addresses at the local side of the VPN tunnel that are
able to trigger IPSec functionality on this VPN connection profile.
This range represents the red IP address range at this side of the
VPN tunnel.
The syntax of
localrange
can be as depicted in the following
examples:
•
IP address/subnetmask: e.g. 192.6.0.0/255.255.0.0
•
Limited IP address range: e.g. 192.6.[1-20].[200-230]
•
IP subnet range: e.g. 192.6.[0-255].[0-255] or 192.6.*.*
•
Single address range: e.g. 192.6.11.30
•
Short single address: e.g. 60.138 (<=> 60.0.0.138).
OPTIONAL
remoterange The range of IP addresses at the far end side of the VPN tunnel that
are able to trigger IPSec functionality on this VPN connection profile.
This range represents the red IP address range at the far end of the
VPN tunnel.
The syntax of
remoterange
can be as depicted in the following
examples:
•
IP address/subnetmask: e.g. 192.6.0.0/255.255.0.0
•
Limited IP address range: e.g. 192.6.[1-20].[200-230]
•
IP subnet range: e.g. 192.6.[0-255].[0-255] or 192.6.*.*
•
Single address range: e.g. 192.6.11.30
•
Short single address: e.g. 60.138 (<=> 60.0.0.138).
OPTIONAL
descriptor The AH/ESP (Phase 2) SA's IP Security descriptor. Choose between:
•
def_auth
•
def_encrypt.
OPTIONAL