Samsung Ubigate iBG3026 Configuration Manual page 338

CHAPTER 25. IPSEC
5.
Display dynamic IKE policies.
Router# show crypto dynamic ike policy all
Policy Remote-id
Address-Pool
sales U david@abc-... Aggressive P1 pre-g1-3des-sha1
1 S 20.1.1.100
E 20.1.1.150
6.
Display dynamic IKE policies in detail.
Router# show crypto dynamic ike policy all detail
Policy name sales, Modeconfig group
Aggressive mode, Response Only, PFS is not enabled, Shared
Key is *****
Local addr: 192.168.55.52, Local ident 192.168.55.52(ip-
address)
Remote idents are david@abc-corp.com(email-id), mike@abc-
corp.comm(email
id)
Address Pool:
Proposal of priority 1
7.
Configure dynamic IPSec policy for a group of mobile users.
Router/configure/crypto#
Router/configure/crypto# dynamic
Router/configure/crypto/dynamic# ipsec policy sales modecfg-
group
Router/configure/crypto/dynamic/ipsec/policy sales# match
address 10.0.1.0 24
Router/configure/crypto/dynamic/ipsec/policy sales# proposal
1
298
Pool# 1: 20.1.1.100 to 20.1.1.150
Encryption algorithm: 3des
Hash Algorithm: sha1
Authentication Mode: pre-shared-key
DH Group: group1
Lifetime in seconds: 86400
Lifetime in kilobytes: unlimited
Mode Transform
© SAMSUNG Electronics Co., Ltd.