Enabling Ipsec And Ike - Motorola BSR 2000 Configuration And Management Manual

BSR 2000 Configuration and Management Guide
2. Issue the ike phase2 lifetime command in IPSec Configuration mode to

Enabling IPSec and IKE

Follow these steps to enable PacketCable IPSec and IKE:
1. Issue the ipsec command in Global Configuration mode to enter IPSec
2. Issue the ike client-addr command in IPSec Configuration mode to specify the
3. Issue the no ipsec shutdown command to enable IPSEC and IKE.
Caution: Improperly configured policies could prevent all IP traffic going in
and/or out of the BSR.
7-24
configure the IKE phase 2 lifetime value, and optionally configure the lifesize
value for the lifetime:
MOT(config-ipsec)# ike phase2 lifetime <0, 300-2592000> [lifesize <0,
10240-4190000>]
where:
0, 300-2592000 is the lifetime interval value in seconds. The default is
28800. Zero indicates an unlimited time.
0, 10240-4190000 is the lifesize value in kilobytes. The default is 0, which
indicates an unlimited size.
Configuration mode.
IP address used by the BSR for its source address during IKE protocol exchanges.
MOT(config-ipsec)# ike client-addr <A.B.C.D>
where:
A.B.C.D is the host IP address used for IKE.
MGBI
Release 1.0
526360-001-00 Rev. B