Vpn - Sierra Wireless AirLink RV50 Series User Manual

ALEOS 4.9.0 Software Configuration User Guide for AirLink RV50 Series
Table D-6: VPN Commands
Command
*IPSEC_INBOUND
*IPSEC_OB_ALEOS
*IPSEC_OB_HOST
*IPSEC1_AUTH
*IPSEC2_AUTH
*IPSEC3_AUTH
*IPSEC4_AUTH
*IPSEC5_AUTH
*IPSEC1_DH
*IPSEC2_DH
*IPSEC3_DH
*IPSEC4_DH
*IPSEC5_DH
Rev 1 Dec. 17

VPN

Description
Query or set the incoming public Internet traffic.
AT*IPSEC_INBOUND? to query
AT*IPSEC_INBOUND=n to set
n=0—Blocked (Incoming public Internet traffic is blocked. Only
•
traffic through the VPN tunnel is allowed.) Default
n=1—Allowed (Incoming public Internet traffic is allowed.)
•
Query or set outgoing traffic from the AirLink gateway.
AT*IPSEC_OB_ALEOS? to query
AT*IPSEC_OB_ALEOS=n to set
n=0—Blocked (Outgoing traffic from the AirLink gateway to the
•
public Internet is blocked. Only traffic through the VPN tunnel is
allowed.)
n=1—Allowed (Outgoing traffic from the AirLink gateway to the
•
public Internet is allowed.) Default
Query or set the outgoing Host out of band traffic.
AT*IPSEC_OB_HOST? to query
AT*IPSEC_OB_HOST=n to set
n=0—Blocked (Public Internet traffic from the host device is
•
blocked. Only traffic through the VPN tunnel is allowed.) Default
n=1—Allowed (Public Internet traffic from the host device is allowed.)
•
Query or set the authentication type for # VPN.
AT*IPSEC[VPN number]_AUTH? to query
AT*IPSEC[VPN number]_AUTH=n to set
n=0—None
•
n=1—MD5
•
n=2—SHA1 (default)
•
Note: MD5 is an algorithm that produces a 128-bit digest for authenti-
cation. SHA is a more secure algorithm that produces a 160-bit digest.
Query or set how the AirLink gateway VPN creates an SA with the VPN
server. The DH (Diffie-Hellman) key exchange protocol establishes pre-
shared keys during the phase 1 authentication. The AirLink gateway
supports three prime key lengths, including Group 1 (768 bits), Group 2
(1,024 bits), and Group 5 (1,536 bits).
AT*IPSEC[VPN number]_DH? to query
AT*IPSEC[VPN number]_DH=n to set
n=0—None
•
n=1—DH1
•
n=2—DH2 (default)
•
n=5—DH5
•
430 41111088