Draytek Vigor2620 LTE Series User Manual page 563

T e l n e t C o m m
T e l n e t C o m m
This command allows users to set advanced parameters for LAN to LAN function.
S S y y n n t t a a x x
vpn l2lset <list index> peerid <peerid>
vpn l2lset <list index> localid <localid>
vpn l2lset <list index> main <auto/proposal index>
vpn l2lset <list index> aggressive <desg1/desg2/aesg1/aesg2>
vpn l2lset <list index> pfs <on/off>
vpn l2lset <list index> phase1 <lifetime>
vpn l2lset <list index> phase2 <lifetime>
vpn l2lset <list index> x509localid <0/1>
S S y y n n t t a a x x
Parameter
<list index> peerid
<peerid>
<list index> localid
<localid>
<list index> main
<auto/proposal index>
<list index> aggressive
<desg1/desg2/aesg1/aesg
2>
<list index> pfs <on/off>
<list index> phase1
<lifetime>
<list index> phase2
<lifetime>
<list index> X509localid
<0/1>
E E x x a a m m p p l
> vpn l2lset 1 peerid test
Vigor2620 Series User's Guide
a n d : v p n l 2 l s e t
a n d : v p n l 2 l s e t
D D e e s s c c r r i i p p t t i i o o n n
Description
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<peerid>: Enter the peer identity for aggressive mode.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<localid>: Enter the local identity for aggressive mode.
It means to choose proposal for main mode.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<auto/proposal index>: Enter auto or proposal index number
to choose the default proposal or specified proposal.
It means the chosen DH group for aggressive mode.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<desg1/desg2/aesg1/aesg2>: Enter desg1, desg2, aesg1 or
aesg2.
It means "perfect forward secrete".
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<on/off>: Enter or or off to turn on/off the PSF
configuration.
It means to set the lifetime value for phase 1 of IKE.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<lifetime>: Enter a value.
It means to set the lifetime value for phase 2 of IKE.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<lifetime>: Enter a value.
It means the local identity for X509 server.
<list index>: Enter the index number of L2L (LAN to LAN)
profile.
<0/1>: Enter 1 or 0 to enable or disable the local identity
configuration of X509 server.
l e e
551