Nortel BCM50e Configuration page 262

262 Appendix H Command Interpreter
Table 65 IPSec commands
Command
nailUp
activeProtocol
p2MultiPro
p2EncryAlgo
p2EncryKeyLen
p2AuthAlgo
p2SaLifeTime
encap
pfs
antiReplay
connType
authOptions
onDemand
ODService
groupID
groupPasswd
username
password
N0115789
Description
Turns nailed up feature on or off.
<Yes|No>
Sets the protocol.
<0:AH | 1:ESP>
Turns phase 2 multiple proposal on or off.
<Yes|No>
Sets the phase 2 encryption algorithm.
<0:Null | 1:DES
| 2:3DES |
3:AES>
Sets the phase 2 encryption key length
<0:128 | 1:192
(with AES encryption).
| 2:256>
Sets the phase 2 authentication
<0:MD5 |
algorithm.
1:SHA1>
Sets the phase 2 SA lifetime.
<seconds>
Sets the encapsulation mode.
<0:Tunnel |
1:Transport>
Sets Perfect Forward Secrecy.
<0:None | 1:DH1
| 2:DH2>
Turns replay detection on or off.
<Yes | No>
Specifies whether the rule is for a branch
<0:Branch
office or Contivity Client VPN connection.
Office |
1:Contivity
Client>
Sets the Business Secure Router to
<0:Username
either send just the username and
Password |
password to the remote Contivity VPN
1:Group ID &
switch, or a group ID and password as
Password
well.
Sets whether or not outgoing packets can
<on | off>
automatically trigger a VPN connection to
the remote Contivity VPN switch.
Sets which specific services can
[netbios] [ntp]
automatically trigger a VPN connection to
[none]...
the remote Contivity VPN switch.
Sets the Contivity Client tunnel's user's
<group ID>
group ID.
Sets the Contivity Client tunnel's user's
<group
group password.
password>
Sets the Contivity Client tunnel's user's
<name>
username.
Sets the Contivity Client tunnel's user's
<password>
password.