Parameters
IKE mode config poolname
range of private addresses for
IKE mode config to assign to
mobile users
DNS server(s) for IKE mode
config (optional)
WINS (NetBIOS) server(s) for
IKE mode config (optional)
IKE policy number
initiate mode
attribute policy number for IKE
SA proposals
IKE authentication method
IKE SA authentication
algorithm
IKE SA encryption algorithm
IKE SA lifetime
IPSec SA proposals
transform setname
AH authentication algorithm
ESP encryption
algorithm
Options
alphanumeric string
first A.B.C.D
last A.B.C.D
A.B.C.D
A.B.C.D
1 to 10,000
none
1 to 65,535
• preshared keys
• DSS digital certificate
• RSA digital certificates
• MD5
• SHA-1
• DES
• 3DES
• AES 128-bit
• AES 192-bit
• AES 256-bit
60 to 86,400 seconds
• AH
• ESP
• AH and ESP
alphanumeric string
• MD5
• SHA-1
• DES
• 3DES
• AES 128-bit
• AES 192-bit
• AES 256-bit
• None (null)
Obtain Setting From
—
organizational policy
organizational policy
organizational policy
highest on the router
—
—
match peer
match peer
match peer
match peer
match peer
—
match peer
match peer
Virtual Private Networks
Quick Start
Your Setting
no initiate
8-95