ZyXEL Communications ZYWALL - CLI Reference Manual page 139

Table 68 Input Values for IPSec VPN Commands (continued)
LABEL
distinguished_name
sort_order
The following sections list the IPSec VPN commands.
16.2.1 IKE SA Commands
This table lists the commands for IKE SAs (VPN gateways).
Table 69 isakmp Commands: IKE SAs
COMMAND
show isakmp keepalive
show isakmp policy [policy_name]
isakmp keepalive <2..60>
[no] isakmp policy policy_name
activate
deactivate
authentication {pre-share | rsa-sig}
certificate certificate-name
[no] dpd
[no] fall-back
fall-back-check-interval <60..86400>
mode {main | aggressive}
ZyWALL (ZLD) CLI Reference Guide
DESCRIPTION
A domain name. You can use up to 511 alphanumeric, characters, spaces,
or .@=,_- characters.
Sort the list of currently connected SAs by one of the following
classifications.
algorithm
encapsulation
inbound
name
outbound
policy
timeout
uptime
DESCRIPTION
Displays the Dead Peer Detection period.
Shows the specified IKE SA or all IKE SAs.
Sets the Dead Peer Detection period.
Creates the specified IKE SA if necessary and
enters sub-command mode. The
deletes the specified IKE SA.
Activates or deactivates the specified IKE SA.
Specifies whether to use a pre-shared key or a
certificate for authentication.
Sets the certificate that can be used for
authentication.
Enables Dead Peer Detection (DPD). The
command disables DPD.
Set this to have the ZyWALL reconnect to the
primary address when it becomes available again
and stop using the secondary connection, if the
connection to the primary address goes down and
the ZyWALL changes to using the secondary
connection.
Users will lose their VPN connection briefly while
the ZyWALL changes back to the primary
connection. To use this, the peer device at the
secondary address cannot be set to use a nailed-
up VPN connection.
Sets how often (in seconds) the ZyWALL checks if
the primary address is available.
Sets the negotiating mode.
Chapter 16 IPSec VPN
no command
no
139