HP 7102dl - ProCurve Secure Router Configuration Manual page 579

SA Attribute Value Options
Life Type • seconds
• kilobytes
Life Time • Number of
seconds
• Number of
kilobytes
mapname
transform
set in crypto
map
map on WAN
interface
Remote Setting
Figure 10-17 shows a sample VPN configuration and where you would look
for the local settings.
ip crypto
!
crypto ipsec transform-set MyTrans esp-des esp-md5-hmac
mode tunnel
crypto map MyMap 1 ipsec-ike
match address VPNSite
set peer 10.6.1.1
set transform-set MyTrans
set security-association lifetime seconds 28800
!
interface ppp 1
ip address 10.1.1.1
crypto map MyMap
no shutdown
!
Figure 10-17. Sample VPN Settings in Running-Config
Troubleshooting a VPN That Uses IPSec
Setting in the Options
Running-Config
crypto map • kilobytes
<mapname>
• seconds
<mapindex>
set security-
association
lifetime
crypto map • 120 to 86,400
<mapname>
• 2560 to
<mapindex>:
536,870,912
• set security-
association
lifetime
seconds
<seconds>
• set security-
association
lifetime
kilobytes
<kilobytes>
encryption
algorithm
255.255.255.0
lifetime
life type
Virtual Private Networks
Local Setting
authentication
algorithm
setname
10-85