Samsung Ubigate iBG2016 Configuration Manual page 350

CHAPTER 5. IPSEC
8.
Display dynamic IPSec policies.
Router# show crypto dynamic ipsec policy all
Policy
------
sales
9.
Display dynamic IPSec policies in detail.
Router# show crypto dynamic ipsec policy all detail
Policy sales is enabled, Modeconfig Group
Action is Apply
Key Management is Automatic
PFS Group is disabled
Match Address:
Proposal of priority 1
10.
Configure firewall policies to allow IKE negotiation through untrusted
interface.
Router/configure# firewall internet
Router/configure/firewall internet# policy 1000 in service
ike self
Router/configure/firewall internet/policy 1000 in# exit
300
Match
----------------- ----- -------------------
S 10.0.1.0/24/any Any
D any/any/any
Protocol is Any
Source ip address(ip/mask/port):(10.0.1.0/255.255.
255.0/any)
Destination ip address(ip/mask/port):(any/any/any)
Protocol: esp
Mode: Tunnel
Encryption Algorithm: aes256(key length=256 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
Proto Transform
P1 esp-aes-sha1-tunl
© SAMSUNG Electronics Co., Ltd.