Samsung Ubigate iBG3026 Configuration Manual page 330

CHAPTER 25. IPSEC
PFS Group is disabled
Match Address:
address(ip/mask/port):(10.0.1.0/255.255.255.0/any)
Proposal of priority 1
Policy INsales is enabled, User group name sales
Direction is inbound, Action is Apply
Key Management is Automatic
PFS Group is disabled
Match Address:
address(ip/mask/port):(10.0.1.0/255.255.255.0/any)
Proposal of priority 1
10.
Configure RADIUS server(applicable only if client authentication is
configured in dynamic IKE policy).
Router/configure# aaa
Router/configure/aaa# radius
Router/configure/aaa/radius# primary_server 172.168.2.1
Primary Radius server configured.
Router/configure/aaa/radius# secondary_server 192.168.2.1
Secondary Radius server configured.
Router/configure/aaa/radius# enable radius
Router/configure/aaa/radius# exit
Router/configure/aaa# exit
290
Protocol is Any
Source ip
Destination ip address(ip/mask/port):(any/any/any)
Protocol: esp
Mode: tunnel
Encryption Algorithm: aes256(key length=256 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
Protocol is Any
Source ip address(ip/mask/port):(any/any/any)
Destination ip
Protocol: esp
Mode: tunnel
Encryption Algorithm: aes256(key length=256 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
© SAMSUNG Electronics Co., Ltd.