Ips Ec Commands; Overview - 3Com OfficeConnect 3C100XF Cli User's Manual

22

Overview

IPS C
EC OMMANDS
This chapter describes the IPSec (IP Security) commands accessible from the CLI.
IPSec is the IETF security protocol for virtual private networks. It provides
cryptographic security services supporting a combination of authentication,
integrity, access control, and confidentiality. These services are in the network layer
of the protocol stack.
The following table identifies the IPSec commands described in this chapter.
Command Command Name
Type
Enable enable ip security_option
Disable disable ip security_option
Show show ip security
show ip security settings
show security_option
show security_option settings
If you are using Windows 2000 Server or Windows 2000 Pro, you need to make
the following changes to the system registry in order for IPSec and L2TP tunnels to
work properly.
1 Start the Registry Editor (Regedt32.exe).
2 Locate the following key in the registry:
\HKEY_LOCAL_MACHINES\System\CurrentControlSet\Services\Rasman\Parame
ters
3 On the Edit menu, click Add Value and then add the following registry value:
Value Name: ProhibitIpSec
Data Type: REG_DWORD
Value: 1
4 Quit the Registry Editor.
5 Reboot your PC for the changes you made to the Registry Settings to take effect.
Decrypting of incoming packets: If you are manually applying an IPSec policy,
please be aware that incoming packets will be decrypted even when the IPSec
policy is not applied on the WAN interface.