ipsec descriptor add
Add an IKE (Phase 1) and AH/ESP (Phase 2) security descriptor.
Adding a security descriptor allows to group the different mathematical operations which need to be applied on packets
intended to pass a secure tunnel.
SYNTAX:
ipsec descriptor add
where:
name
phase
E-DOC-CTC-20040210-0028 v3.0
name = <string>
phase = <{IKE|IPSEC|1|2|I|II}>
value = <quoted string>
A name for the new security descriptor.
Specifies whether the security descriptor applies to IKE (Phase 1)
or AH/ESP (Phase 2) SAs.
Specify:
•
IKE or 1 or I:
For specifying an IKE (Phase 1) security descriptor.
•
IPSEC or 2 of II:
For specifying an AH/ESP (Phase 2) security descriptor.
IPSec Commands
REQUIRED
REQUIRED
307