ZyXEL Communications ZYWALL - CLI Reference Manual page 141

16.2.2 IPSec SA Commands (except Manual Keys)
This table lists the commands for IPSec SAs, excluding manual keys (VPN connections using
VPN gateways).
Table 70 crypto Commands: IPSec SAs
COMMAND
[no] crypto ignore-df-bit
show crypto map [map_name]
crypto map dial map_name
[no] crypto map map_name
crypto map rename map_name map_name
crypto map map_name
activate
deactivate
ipsec-isakmp policy_name
encapsulation {tunnel | transport}
transform-set esp_crypto_algo
[esp_crypto_algo [esp_crypto_algo]]
transform-set {ah-md5 | ah-sha} [{ah-md5 |
ah-sha} [{ah-md5 | ah-sha}]]
ZyWALL (ZLD) CLI Reference Guide
Chapter 16 IPSec VPN
DESCRIPTION
Fragment packets larger than the MTU (Maximum
Transmission Unit) that have the "don't" fragment"
bit in the header turned on. The
the ZyWALL drop packets larger than the MTU that
have the "don't" fragment" bit in the header turned
on.
Shows the specified IPSec SA or all IPSec SAs.
Dials the specified IPSec SA manually. This
command does not work for IPSec SAs using
manual keys or for IPSec SAs where the remote
gateway address is 0.0.0.0.
Creates the specified IPSec SA if necessary and
enters sub-command mode. The
deletes the specified IPSec SA.
Renames the specified IPSec SA (first map_name)
to the specified name (second map_name).
Activates or deactivates the specified IPSec SA.
Specifies the IKE SA for this IPSec SA and
disables manual key.
Sets the encapsulation mode.
Sets the active protocol to ESP and sets the
encryption and authentication algorithms for each
proposal.
esp_crypto_algo: {esp-3des-md5 | esp-3des-
sha | esp-aes128-md5 | esp-aes128-sha | esp-
aes192-md5 | esp-aes192-sha | esp-aes256-md5 |
esp-aes256-sha | esp-des-md5 | esp-des-sha |
esp-null-md5 | esp-null-sha}
Sets the active protocol to AH and sets the
encryption and authentication algorithms for each
proposal.
command has
no
command
no
141