Nortel 3050 Command Reference Manual page 303

Table 111
User Tunnel Profile Menu Options (/cfg/vpn/ipsec/utunprof) (cont'd.)
Command Syntax and Usage
ikeprof <reference to name of IKE profile>
del
auto
splittun disabled|enabled|enabled_inverse|enabled_inverse_l
ocal|enabled_inverse_portal
Copyright © 2007 Nortel Networks
.
/cfg/vpn <id> /ipsec/utunprof User Tunnel Profile Configuration 303
Sets the name of the user tunnel profile. This name should be
referenced in the group whose members should use the current user
tunnel profile in their IPsec connections.
To reference the user tunnel profile in a group, use the /cfg/vpn
#/aaa/group #/ipsec/utunnel command.
Lets you reference a previously created IKE profile. Group members
using the current user tunnel profile will make use of all the settings
made in the referenced IKE profile when establishing an IPsec
connection to the VPN Gateway.
Deletes the current user tunnel profile.
Displays the Auto menu. To view menu options, see
/ipsec/utunprof <id> /auto Auto Connect Configuration" (page
305).
Lets you set the desired split tunnel mode. Split tunneling allows client
data to travel either through a tunnel to the VPN Gateway or directly
to the Internet.
All IPsec client traffic is tunneled through the VPN Gateway by default.
Split tunneling lets you configure specific network routes that are
downloaded to the client. Only these network routes are then tunneled;
any other traffic goes to the local network interface. Split tunneling
allows the remote user to print locally, for example, even while tunneled
to the VPN Gateway.
•
disabled. Tunnels all IPsec client traffic to the VPN Gateway but
does not allow SSL connectivity to the Portal after the tunnel is
established.
•
enabled. Tunnels IPsec client traffic through the VPN Gateway to
specified networks only (see
<id> /splitnets Split Networks Configuration" (page
other client traffic goes through the client's normal network interface.
SSL connectivity to the Portal is allowed.
•
enabled_inverse. Client traffic is not tunneled to the specified
networks (see
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
"/cfg/vpn <id> /ipsec/utunprof
"/cfg/vpn <id> /ipsec/utunprof <id>
"/cfg/vpn <id>
308)). All