Default Configuration Setting On Oa-700 - Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

D C
EFAULT ONFIGURATION
To ease the setup of IPsec tunnel, OA-700 provides the following default
configurations:
•
If an IKE policy is not configured, the 'default' ike policy is applied to the crypto
map. Following are the default values for IKE policy:
i. Default proposal in ike policy: sha1-aes128
ii. Default PFS group in ike policy: pfs group2
iii. Default IPsec security-association lifetime in seconds: 28800
iv. Default IKE lifetime in seconds: 86400
•
Default authentication mechanism: Preshared Keys (PSK)
•
If a transform set is not configured, the 'default' transform set is applied to the
crypto map. Following are the default values for transform-set:
i. esp-sha1-des
ii. esp-md5-des
•
If a crypto map is not configured, you can attach the 'default' crypto map to an
interface. Following are the default values within a crypto map:
i. Default IKE policy in crypto map: 'default' ike policy
ii. Default transform set in crypto map: 'default' transform set
iii. Default PFS group in crypto map: pfs group2.
iv. Default lifetime in Seconds for a crypto map: 28800
CLI Configuration Guide
Beta
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
S OA-700
ETTING ON
Alcatel-Lucent
IPsec VPN Overview
749
Beta