Watchguard V10 Command Line Interface Manual page 113

proposal command (configure IPSec level)
WG#config<ENTER>
WG(config)#ipsec <ENTER>
WG(config-ipsec)#proposal <"name"> [+] \
[-antireplay_window [0|32|64]] \
-esp {<des|3des|md5|sha><lifetime<min|hr>
\
|lifesize<KB|MB>>} \
-ah {<md5|sha><lifetime<min|hr>|
lifesize<KB|MB>>}...
Effect
Arguments
WatchGuard Command Line Interface Guide
Second level configuration mode commands
Creates or modifies an IPSec proposal that can then
be incorporated into IPSec actions (which can then
be added to security policies.)
<"name">
This argument notes the name assigned to this new
proposal.
-antireplay_window <0|32|64>
This argument (and the required value) sets the
anti-replay window size.
-esp {<des|3des> [md5|sha] <lifetime
<min|hrs>| \
lifesize <KB|MB>>}
If you want to include an ESP transform in this
proposal, type this argument, plus the necessary
values–algorithm, life size, life time.
-ah {<md5|sha> <lifetime
<min|hrs>|lifesize \
<KB|MB>>}
If you want to include an AH transform in this
proposal, type this argument, plus the necessary
values–algorithm, life size, life time.
+
Type this character before entering a new
transform that will be added to an existing IPSec
proposal.
99