Sierra Wireless AirLink RV50 Series User Manual page 434

ALEOS 4.9.0 Software Configuration User Guide for AirLink RV50 Series
Table D-6: VPN Commands
Command
*IPSEC1_NEG_MODE
*IPSEC2_NEG_MODE
*IPSEC3_NEG_MODE
*IPSEC4_NEG_MODE
*IPSEC5_NEG_MODE
*IPSEC1_PFS
*IPSEC2_PFS
*IPSEC3_PFS
*IPSEC4_PFS
*IPSEC5_PFS
*IPSEC1_REMOTE_ADDR
*IPSEC2_REMOTE_ADDR
*IPSEC3_REMOTE_ADDR
*IPSEC4_REMOTE_ADDR
*IPSEC5_REMOTE_ADDR
*IPSEC1_REMOTE_ADDR_MASK
*IPSEC2_REMOTE_ADDR_MASK
*IPSEC3_REMOTE_ADDR_MASK
*IPSEC4_REMOTE_ADDR_MASK
*IPSEC5_REMOTE_ADDR_MASK
*IPSEC1_REMOTE_ADDR_TYPE
*IPSEC2_REMOTE_ADDR_TYPE
*IPSEC3_REMOTE_ADDR_TYPE
*IPSEC4_REMOTE_ADDR_TYPE
*IPSEC5_REMOTE_ADDR_TYPE
*IPSEC1_REMOTE_ID
*IPSEC2_REMOTE_ID
*IPSEC3_REMOTE_ID
*IPSEC4_REMOTE_ID
*IPSEC5_REMOTE_ID
Rev 1 Dec. 17
Description
Query or set the negotiation mode for # VPN.
AT*IPSEC[VPN number]_NEG_MODE? returns
AT*IPSEC[VPN number]_NEG_MODE=n to set
n=1—Main
•
n=2—Aggressive
•
Note: Aggressive mode offers increased performance at the expense of
security.
Query or set the Perfect Forward Secrecy (PFS) setting for # VPN.
PFS provides additional security through a DH shared secret value.
When this feature is enabled, one key cannot be derived from another.
This ensures previous and subsequent encryption keys are secure even
if one key is compromised.
AT*IPSEC[VPN number]_PFS? to query PFS
AT*IPSEC[VPN number]_PFS=n to set PFS
n=0—Yes (default)
•
n=1—No
•
Query or set the IP address of the device behind the gateway for # VPN.
AT*IPSEC[VPN number]_REMOTE_ADDR? to query
AT*IPSEC[VPN number]_REMOTE_ADDR=[IP address] to set
Query or set the remote subnet mask information (24-bit netmask).
AT*IPSEC[VPN number]_REMOTE_ADDR_MASK? to query
AT*IPSEC[VPN number]_REMOTE_ADDR_MASK =[subnet mask] to set
Default is 255.255.255.0
Query or set network information of the IPsec server behind the IPsec
gateway for # VPN.
AT*IPSEC[VPN number]_REMOTE_ADDR_TYPE? to query
AT*IPSEC[VPN number]_REMOTE_ADDR_TYPE=n to set
n=5—Single Address
•
n=17—Subnet Address (default)
•
Query or set the remote (Peer Identity) ID for the # VPN.
If IP is selected as the remote (Peer Identity) type,
•
AT*IPSEC[VPN number]_REMOTE_ID? returns the WAN IP
address assigned by the Mobile Network Operator
If FQDN or User FQDN is selected as the remote (Peer Identity)
•
type, AT*IPSEC[VPN number]_REMOTE_ID? returns the FQDN (for
example me@mycompany.com)
To set the remote ID:
AT*IPSEC[VPN number]_REMOTE _ID=[IP address] or [FQDN],
depending on the setting for remote ID (Peer Identity) type.
434 41111088