Ipsec Peer Config - THOMSON SpeedTouch 608 Cli Reference Manual

IPSec Commands

ipsec peer config

Configure an existing peer IPSec gateway profile. Before being able to configure a profile, it must be added via the
command ipsec peer add.
SYNTAX:
ipsec peer config
where:
peer
addr
localid
remoteid
auth
secret
xauthuser
xauthpass
descriptor
282
peer = <>
[addr = <ip-address>]
[localid = <Identity : address, range or id string>]
[remoteid = <Identity : address, range or id string>]
[auth = <{preshared|cert|cert_or_shared}>]
[secret = <password>]
[xauthuser = <quoted string>]
[xauthpass = <password>]
[descriptor = <{def_ike}>]
The name of the peer IPSec gateway profile to configure.
The IP address of the remote IPSec peer, often referred to as the
black IP address of the peer IPSec gateway.
Use 0 to match any address.
The ID by which the peer gate identifies this gate.
For convenience, use the local gate's red IP address, IP address range
or DN (in case of certificates).
Do not specify localid to allow any address.
The ID of the peer gate.
For convenience, use the remote gate's red IP address, IP address
range or DN (in case of certificates).
Do not specify remoteid to allow any address.
The authentication method. Choose between:
•
preshared:
In case a shared secret, i.e. a fixed password, is used.
Specify the shared secret via the secret parameter.
•
cert:
In case of certificates.
•
cert_or_preshared:
In case both authentication methods (certificates and a shared
secret) are allowed. Authentication via certificates is favoured
in case both are offered.
For secret based authentication, the secret.
When using X-AUTH , the X-AUTH username.
When using X-AUTH , the X-AUTH password.
The Phase 1 ISAKMP security descriptor to be used.
For a list of available descriptors, use the command ipsec descriptor
list.
If not specified, the default available Phase 1 descriptor def_ike is
used.
REQUIRED
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
E-DOC-CTC-20040216-0002 v1.0