Motorola BSR 2000 Configuration And Management Manual page 415

Release 1.0
3. Issue the spd policy bypass command to specify the default bypass policy to
4. Issue the show ipsec spd policy command to verify if SPD policy is configured
526360-001-00 Rev. B
ipAddr{-ipAddr2|:ipMask} is the source network IP address followed by a
colon and subnetwork mask. If a hyphen is used between ipAddr and
ipAddr2, this specifies a range of source network IP addresses.
ipAddr{-ipAddr2|:ipMask} is the destination network IP address followed by
a colon and subnetwork mask. If a hyphen is used between ipAddr and
ipAddr2, this specifies a range of destination network IP addresses.
num is the transport protocol number which is the IP protocol from the IP
protocol header. The format is a decimal number. A value of "0" represents
any protocol. For example, the Call Management Server/Gate Controller or
Call Management Server/Policy Server can use TCP Port 6 and the Record
Keeping Server can use UDP Port 17.
0-65535 is the source TCP/UDP port number. "0" represents any port.
0-65535 is the destination TCP/UDP port number. "0" represents any port.
apply transport is used if the packet matches the rule for this policy (i.e.,
ipAddr, ipAddr2, num, source port, or destination port matches the packet
being processed), then apply transport mode IPSEC to the IP Packet.
bypass is used if the packet matches the rule for this policy (i.e., ipAddr,
ipAddr2, num, source port, or the destination port matches the packet being
processed), then the IPSEC processing is bypassed and the IP packet is
processed.
discard is used if the packet matches the rule for this policy (i.e., ipAddr, ip
Addr2, num, source port, or dest port matches the packet being processed),
then discard this IP packet.
after optionally allows a rule to be inserted after an existing rule in the SPD.
If the after is not present, the new rule is added to the first index.
num is the policy security entry number. The index numbering begins at "1".
allow a non-protected date to pass:
MOT(config-ipsec)# spd policy 0.0.0.0-255.255.255.255 0.0.0.0-
255.255.255.255 0 0 0 bypass
correctly.
MGBI
Configuring PacketCable
7-19