Table of Contents
Advertisement
AP7131N>admin(network.wan.vpn)> set
Description:
Sets VPN entry parameters.
Syntax:
set type
<name>
authalgo
<name>
authkey
<name>
esp-type
<name>
esp-encalgo
<name>
esp-enckey
<name>
esp-authalgo
<name>
esp-authkey
<name>
spi
<name>
usepfs
<name>
salife
<name>
<tunnel type>
<authalgo>
<dir> <authkey>
<esptype>
<escalgo>
<dir> <enckey>
<authalgo>
<dir> <authkey>
<algo> <dir>
<value>
<mode>
<lifetime>
Sets the tunnel type <name> to
for the specified tunnel name.
Sets the authentication algorithm for <name> to
SHA1.
Sets the AH authentication key (if type is
Manual) for tunnel <name> with the direction set
to
IN
or
OUT,
and the manual authentication key
set to <authkey>. (The key size is
characters for SHA1).
Sets the Encapsulating Security Payload (ESP)
type. Options include ESP, or ESP-AUTH.
Sets the ESP encryption algorithm. Options include
AES128, AES192, or AES256).
Sets the Manual Encryption Key in ASCII for tunnel
<name> and direction
IN
or
key>. The size of the key depends on the
encryption algorithm.
- 32 hex characters for AES128
- 48 hex characters for AES192
- 64 hex characters for AES256
Sets the ESP authentication algorithm. Option is r
SHA1.
Sets ESP Authentication key <name> either for
or
OUT
direction to <auth-key>, an ASCII string of
hex characters. If authalgo is set to SHA1, provide
40 hex characters.
Sets 6 character IN(bound) or OUT(bound) for
AUTH
(Manual Authentication) or
<name> to <spi> (a hex value more than 0xFF)
<value>.
Enables or disables Perfect Forward Secrecy for
<name>.
Defines the name of the tunnnel <name> the
Security Association Life Time <300-28800>
applies to in seconds.
8-51
CLI Reference
Auto
or
Manual
40
hex
OUT
to the key <enc-
IN
ESP
for
Advertisement
Table of Contents
