Ipsec Connection Config - THOMSON SpeedTouch 608 Cli Reference Manual

ipsec connection config

Configure an existing VPN connection profile. Before being able to configure a profile, it must be added via the
command ipsec connection add.
SYNTAX:
ipsec connection config
where:
conn
peer
localrange
remoterange
descriptor
E-DOC-CTC-20040216-0002 v1.0
conn = <>
[peer = <>]
[localrange = <ip-range>]
[remoterange = <ip-range>]
[descriptor = <{def_auth|def_encrypt}>]
The name of the VPN connection profile to configure.
The name of the peer gateway profile the VPN connection must use.
Use the command ipsec peer list for available peer gateway profiles.
The range of IP addresses at the local side of the VPN tunnel that are
able to trigger IPSec functionality on this VPN connection profile.
This range represents the red IP address range at this side of the
VPN tunnel.
The syntax of localrange can be as depicted in the following
examples:
•
IP address/subnetmask: e.g. 192.6.0.0/255.255.0.0
•
Limited IP address range: e.g. 192.6.[1-20].[200-230]
•
IP subnet range: e.g. 192.6.[0-255].[0-255] or 192.6.*.*
•
Single address range: e.g. 192.6.11.30
•
Short single address: e.g. 60.138 (<=> 60.0.0.138).
The range of IP addresses at the far end side of the VPN tunnel that
are able to trigger IPSec functionality on this VPN connection profile.
This range represents the red IP address range at the far end of the
VPN tunnel.
The syntax of remoterange can be as depicted in the following
examples:
•
IP address/subnetmask: e.g. 192.6.0.0/255.255.0.0
•
Limited IP address range: e.g. 192.6.[1-20].[200-230]
•
IP subnet range: e.g. 192.6.[0-255].[0-255] or 192.6.*.*
•
Single address range: e.g. 192.6.11.30
•
Short single address: e.g. 60.138 (<=> 60.0.0.138).
The AH/ESP (Phase 2) SA's IP Security descriptor. Choose between:
•
def_auth
•
def_encrypt.
IPSec Commands
REQUIRED
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
269