Samsung Ubigate iBG3026 Configuration Manual page 329

7.
Configure dynamic IPSec policy for a group of mobile users.
Router/configure/crypto/dynamic# ipsec policy sales
Router/configure/crypto/dynamic/ipsec/policy sales# match
address 10.0.1.0 24
Default proposal created with priority1-esp-3des-sha1-tunnel
and activated.
Router/configure/crypto/dynamic/ipsec/policy sales# proposal 1
Router/configure/crypto/dynamic/ipsec/policy sales/proposal
1#
encryption-algorithm aes256-cbc
Router/configure/crypto/dynamic/ipsec/policy sales/proposal
1# exit
Router/configure/crypto/dynamic/ipsec/policy sales# exit
Router/configure/crypto/dynamic#
8.
Display dynamic IPSec policies.
Router# show crypto dynamic ipsec policy all
Policy
------
sales
INsales S any/any/any
9.
Display dynamic IPSec policies in detail.
Router# show crypto dynamic ipsec policy all detail
Policy sales is enabled, User group name sales
Direction is outbound, Action is Apply
Key Management is Automatic
© SAMSUNG Electronics Co., Ltd.
Authentication Mode: pre-shared-key
DH Group: group1
Lifetime in seconds: 86400
Lifetime in kilobytes: unlimited
Match
-----
S 10.0.1.0/24/any Any
D any/any/any
D 10.0.1.0/24/any
Ubigate iBG3026 Configuration Guide/Ed.00
Proto Transform
----- ---------
P1 esp-aes-sha1-tunl
Any P1 esp-aes-sha1-tunl
289