Nortel 252 Configuration page 286

286 Appendix G Command Interpreter
Table 68 IPSec commands
Command
nailUp
activeProtocol
p2MultiPro
p2EncryAlgo
p2EncryKeyLen
p2AuthAlgo
p2SaLifeTime
encap
pfs
antiReplay
connType
authOptions
onDemand
ODService
groupID
groupPasswd
username
password
NN47923-501
Description
Turns nailed up feature on or off.
<Yes|No>
Sets the protocol.
<0:AH | 1:ESP>
Turns phase 2 multiple proposal on or off.
<Yes|No>
Sets the phase 2 encryption algorithm.
<0:Null | 1:DES
| 2:3DES |
3:AES>
Sets the phase 2 encryption key length
<0:128 | 1:192
(with AES encryption).
| 2:256>
Sets the phase 2 authentication
<0:MD5 |
algorithm.
1:SHA1>
Sets the phase 2 SA lifetime.
<seconds>
Sets the encapsulation mode.
<0:Tunnel |
1:Transport>
Sets Perfect Forward Secrecy.
<0:None | 1:DH1
| 2:DH2>
Turns replay detection on or off.
<Yes | No>
Specifies whether the rule is for a branch
<0:Branch
office or Contivity Client VPN connection.
Office |
1:Contivity
Client>
Sets the Business Secure Router to
<0:Username
either send just the username and
Password |
password to the remote Contivity IPSec
1:Group ID &
router, or a group ID and password as
Password
well.
Sets whether or not outgoing packets can
<on | off>
automatically trigger a VPN connection to
the remote Contivity IPSec router.
Sets which specific services can
[netbios] [ntp]
automatically trigger a VPN connection to
[none]...
the remote Contivity IPSec router.
Sets the Contivity Client tunnel's user's
<group ID>
group ID.
Sets the Contivity Client tunnel's user's
<group
group password.
password>
Sets the Contivity Client tunnel's user's
<name>
username.
Sets the Contivity Client tunnel's user's
<password>
password.