NETGEAR ProSafe FVS318N Cli Reference Manual page 196

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Keyword (might consist of two separate
words)
auto_authentication_algorithm
auto_enable_pfskeygroup
auto_dh_group
auto_select_ike_policy
Command example:
FVS318N> vpn ipsec vpnpolicy configure FVS-to-Paris
vpn-config[vpn-policy]> general_policy_type Auto-Policy
vpn-config[vpn-policy]> general_ip_version IPv4
vpn-config[vpn-policy]> general_remote_end_point_type IP-Address
vpn-config[vpn-policy]> general_remote_end_point ip_address 10.112.71.154
vpn-config[vpn-policy]> general_local_network_type SUBNET
vpn-config[vpn-policy]> general_local_start_address 192.168.1.0
vpn-config[vpn-policy]> general_local_subnet_mask 255.255.255.0
vpn-config[vpn-policy]> general_remote_network_type SUBNET
vpn-config[vpn-policy]> general_remote_start_address 192.168.50.0
vpn-config[vpn-policy]> general_remote_subnet_mask 255.255.255.255
vpn-config[vpn-policy]> auto_sa_lifetime seconds 3600
vpn-config[vpn-policy]> auto_encryption_algorithm 3DES
vpn-config[vpn-policy]> auto_authentication_algorithm SHA-1
vpn-config[vpn-policy]> auto_select_ike_policy FVS-to-Paris
vpn-config[vpn-policy]> save
Related show command:
Associated
Keyword to Select
or Parameter to
Type
MD5 or SHA-1
Y or N
Group1_768_bit,
Group2_1024_bit,
or
Group5_1536_bit
ike policy name Select an existing IKE policy that defines the
show vpn ipsec vpnpolicy setup
VPN Mode Configuration Commands
196
Description
Specifies the authentication algorithm to
negotiate the security association (SA):
• SHA-1. Hash algorithm that produces a
160-bit digest.
• MD5. Hash algorithm that produces a
128-bit digest.
Enables or disables Perfect Forward Secrecy
(PFS). If you enable PFS, you need to issue
the auto_dh_group keyword to specify a
group.
Specifies a Diffie-Hellman (DH) group, which
sets the strength of the algorithm in bits. The
higher the group, the more secure the
exchange.
authentication negotiation.
and show vpn ipsec vpnpolicy status