Nortel BCM50e Configuration page 260

260 Appendix H Command Interpreter
Table 65 IPSec commands
Command
chk_conn.
dpdTime
update_peer
chk_input
show_runtime sa
spd
updatePeerIp
display <rule index>
policyDisplay <rule index>
dial <rule index>
route lan
wan
N0115789
Description
Sets the idle timeout for IPSec
<0~255>
connections. The system disconnects an
IPSec connection with no traffic for the
timeout period. The interval is in minutes
(2 default) and 0 means the connection
never times out.
Sets the idle timeout for IPSec
<minutes>
connections where the Business Secure
Router is waiting for a response from the
peer.
Sets the autotimer for updating IPSec
<0~255>
rules that use a domain name as the
secure gateway IP address. The interval
is in minutes (30 default) and 0 means it
never updates.
Adjusts autotimer to check if any inbound
<0~255>
IPsec traffic has passed during the
specified period. If not, the Business
Secure Router disconnects the tunnel.
Displays runtime phase 1 and phase 2
SA information.
When a dynamic rule accepts a request
and a tunnel is established, a runtime
SPD is created according to the peer's
local IP address. This command displays
these runtime SPDs.
Forces the system to immediately update
IPSec rules that use a domain name as
the secure gateway IP address.
Displays the specified IPSec rule.
Displays the specified IPSec rule's IP
policies.
Triggers the specified phase two
<policy index>
connection.
After IPSec processes a packet and
<on|off>
sends it to the LAN side, this switch
controls whether or not IPSec can be
applied to the packet again.
After IPSec processes a packet and
<on|off>
sends it to the WAN side, this switch
controls whether or not IPSec can be
applied to the packet again.