Ipsec Ike Policy Commands - NETGEAR ProSafe SRX5308 Cli Reference Manual

vpn-config[wizard]> enable_rollover N
vpn-config[wizard]> remote_wan_ipaddress peer44.com
vpn-config[wizard]> local_wan_ipaddress fe80::a8ab:bbff:fe00:2
vpn-config[wizard]> remote_lan_ipv6address fe80::a4bb:ffdd:fe01:2
vpn-config[wizard]> remote_lan_prefixLength 64
vpn-config[wizard]> save
Related show command:
vpn ipsec vpnpolicy status
To display the VPN policy configuration that the wizard created through the vpn ipsec
wizard configure command, issue the show vpn ipsec vpnpolicy setup
command:
SRX5308> show vpn ipsec vpnpolicy setup
Status Name
_______ _________________ ___________ ___________ ______________________________________ ______________________________ _____ ____
Enabled SRX5308-to-Peer44 Auto Policy Tunnel Mode 2002:408b:36e4:a:a8ab:bbff:fe00:1 / 64 fe80::a4bb:ffdd:fe01:2 / 64
Enabled SRX-to-Paris
To display the IKE policy configuration that the wizard created through the vpn ipsec
wizard configure command, issue the show vpn ipsec ikepolicy setup
command:
SRX5308> show vpn ipsec ikepolicy setup
List of IKE Policies
____________________
Name Mode
_________________ __________ ______________________ _____________ __________ ______________ ____________
SRX5308-to-Peer44 main
SRX-to-Paris main
iphone aggressive 10.139.54.228

IPSec IKE Policy Commands

vpn ipsec ikepolicy configure <ike policy name>
This command configures a new or existing manual IPSec IKE policy. After you have issued
the vpn ipsec ikepolicy configure command to specify the name of a new or existing IKE
policy, you enter the vpn-config [ike-policy] mode, and then you can configure one keyword
and associated parameter or associated keyword or associated keyword at a time in the
order that you prefer.
Step 1 Format
Mode
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
show vpn ipsec vpnpolicy
Type IPSec Mode Local
Auto Policy Tunnel Mode 192.168.1.0 / 255.255.255.0
Local ID
fe80::a8ab:bbff:fe00:2 peer44.com
10.139.54.228
vpn ipsec ikepolicy configure <ike policy name>
vpn
VPN Mode Configuration Commands
setup, show vpn ipsec ikepolicy
Remote
192.168.50.0 / 255.255.255.255 SHA-1 3DES
Remote ID Encryption Authentication DH Group
3DES
10.112.71.154 3DES
0.0.0.0 AES-128
210
setup, and show
Auth Encr
SHA-1 3DES
SHA-1 Group 2 (1024 bit)
SHA-1 Group 2 (1024 bit)
SHA-1 Group 2 (1024 bit)