D-Link DSR-250 Cli Reference Manual page 72

Unified Services Router
Sl No Command Name
general_remote_st
19
art_address
general_remote_en
20
d_address
general_remote_su
21
bnet_mask
auto_phase1_excha
22
nge_mode
auto_phase1_direc
23
tion_type
auto_phase1_enabl
24
e_nat_traversal
auto_phase1_nat_k
25
eepalive_frequecy
auto_phase1_local
26
_identtype
auto_phase1_local
27
_identifier
auto_phase1_remot
28
e_identtype
auto_phase1_remot
29
e_identifier
auto_phase1_encry
30
ption_algorithm
Description
entire subnet, or any IP address that
wants to connect.
IP address from where the range needs
to begin
IP address where the range needs to
end
Subnet mask of the subnet used
Main mode negotiates the tunnel with
higher security, but is slower whereas
Aggressive mode establishes a faster
connection.
The connection methods for this router
can be one of the selected
Set NAT traversal to 'On' if you expect
any Network Address Translation (NAT)
to occur during IPsec communication. If
not set this option to Off.
When NAT traversal is set to 'On', use
this option to control the keep-alive-
frequency value. Keep-alive packets
are sent at the mentioned time interval
and these are used to keep the NAT
mappings alive on the NAT device.
Setting this value to 0 disables this
feature.
The ISAKMP identifier for this router
The value of the respective option
chosen in the Identifier Type
The ISAKMP identifier for the remote
device
The value of the respective option
chosen in the Identifier Type
The algorithm used to negotiate the SA.
There are four algorithms supported by
this router: DES, 3DES, AES-128, AES-
192.AES-256/BLOWFISH/CAST128
70
CLI Reference Guide
Type and Description
IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
IP address AAA.BBB.CCC.DDD
where each part is in the range 0-
255
Exchange mode type,
(Main/Aggressive)
Direction type,
(Initiator/Responder/Both)
Nat Traversal Boolean Choice
(Y/N)
Unsigned integer
The ISAKMP identifier for this
router (IP/FQDN/User FQDN/DER
ASN1 DN) (Local-Wan-
IP/FQDN/User-FQDN/DE
R-ASN1-DN)
The value of the respective option
chosen in the Identifier Type
The ISAKMP identifier for the
remote device. (IP/FQDN/User
FQDN/DER ASN1 DN) (Local-
Wan-IP/FQDN/User
-FQDN/DER-ASN1-DN)
The value of the respective option
chosen in the Identifier Type
(None/DES/3DES/AES-128/AES-
192/AES-256
/BLOWFISH/CAST128)