Bay Networks Baystream 7 Configuration And Troubleshooting Manual page 78

Configuring and Troubleshooting Bay Dial VPN Services
Table 5-2. tms_dbm Command Arguments
Argument
spi= security_protocol_index
tatype= tun_auth_type
tamode= tun_auth_mode
takey= tun_auth_key
passwd= password
5-10
Function
spi defines an identifier in the range 256
through 65535 that the gateway uses to
determine the tunnel authentication
type, mode, and key. You configure
these values into the gateway using Site
Manager, as well as configuring them in
TMS. The default value is 0 (no
authentication).
tatype is the type of authentication
algorithm used to cryptographically
checksum tunnel registration messages
between the RAS and the gateway. This
value must be MD5.
tamode is the operating mode of the
authentication algorithm. This value
must be pref-suff (prefix/suffix).
takey is the key that the authentication
algorithm uses. It can be up to 64
hexadecimal characters (0-9, A-F, a-f) in
length.
Relevant only for Layer 2 tunnels, this
parameter specifies the L2TP password
between the LAC and the LNS. It can be
up to 16 characters long. Setting the
password to "" (null) disables password
protection.
BayStream Multiservice Software Version 7.2
(continued)
Used with These
Commands
spi is optional for add and
modify. Not used for other
commands.
If you specify spi for tunnel
authentication, all three ta
arguments are required for
add and modify.
If you specify the ta
arguments, you must also
specify the spi value. The
spi/takey combination in
the TMS database must
match the spi/takey pair
on the gateway, or the
authentication will fail. It
will look like a bad
password, not an
incorrectly matched
encryption key.
Not used for other
commands.
Not used for Dial VPN.
(continued)
115623B Rev. 00