THOMSON SpeedTouch 608 Cli Reference Manual page 278

IPSec Commands
value A quoted string which describes the actual security descriptor. REQUIRED
Phase 1 ISAKMP value syntax (from left to right, optionally of
multiple multiple descriptions seperated by AND and/or OR
statements):
value=
[<{IDENTITY|AGGRESSIVE}>]
<{DES|3DES|RC5|AES|NULL}>
[KEYLENGTH <number>]
[HMAC <{MD5|SHA1}>]
[DHGROUP <number>]
[<{KB|MINUTES|SECONDS}> <{<number>|FOREVER}>]
[<{AND/OR}> <aditional/optional descriptor description>]
Phase 2 IPSec value syntax (from left to right, optionally with
multiple descriptions seperated by AND and/or OR statements):
value=
[PFS DHGROUP <number>]
[<ESP {DES|3DES|RC5|AES|NULL}>]
[KEYLENGTH <number>]
[AH HMAC <{MD5|SHA1}>]
[IPCOMP]
[LZS]
[<{KB|MINUTES|SECONDS}> <{<number>|FOREVER}>]
[<{AND/OR}> <additional/optional descriptor description>]
For a description of the available parameters and allowed combi-
nations, please see below.
The ordering of keywords is significant to the parser, for example
if specifying a descriptor with support for AES-MAC, then "MD5
HMAC AES" will not be parsed the same as "AES HMAC MD5".
E-DOC-CTC-20040216-0002 v1.0
276