Nortel 3050 Command Reference Manual page 255

/cfg/vpn <id> /aaa/ssodomains Single-Sign-On Domain Configuration 255
/cfg/vpn <id> /group <id> /ipsec IPsec Group Configuration
[IPsec Menu]
secret - Set shared secret
utunnel - Set user tunnel profile
The IPsec menu is used to enter a shared secret for IPsec clients
authenticating to the IPsec server with group authentication. This is also
where you map a previously defined user tunnel profile to the current
group. If the user belongs to several groups, the first found combination of
shared secret/user tunnel profile in the user's different groups will be used.
The groups are checked in the order they are configured in the CLI/BBI.
Table 87
IPsec Menu Options (/cfg/vpn/aaa/group/ipsec)
Command Syntax and Usage
secret <shared secret>
utunnel
/cfg/vpn <id> /aaa/ssodomains Single-Sign-On Domain
Configuration
[SSO Domains Menu]
list - List all values
del - Delete a value by number
add - Add a new value
Copyright © 2007 Nortel Networks
.
Note:
This menu is not available if the VPN Gateway software is run on
the ASA 310 or ASA 410 hardware platforms.
Sets the shared secret for clients authenticating to the IPsec server (the
VPN Gateway) with group authentication. The shared secret entered
here must be equal to the shared secret/password configured for group
authentication in the Nortel IPsec VPN client (formerly Contivity).
Note: If user name and password authentication is used (ISAKMP
tunnel), a shared secret is not required. This login type however requires
that the user is configured in the NVG 's local database, using the
/cfg/vpn #/aaa/auth #/local/add command.
Lets you map a previously configured user tunnel profile to the current
group. The user tunnel profile defines the encryption and tunnel
handling parameters to be used when members of the current group
sets up an IPsec tunnel to the VPN Gateway.
For instructions on how to configure a user tunnel profile, see
"/cfg/vpn <id>/ipsec IPsec Configuration" (page
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
293).