Download Efficient Networks Router family Command line interface User guide

IKE PROPOSALS SET SESSION_AUTH
Sets the IKE proposal parameter that specifies the session authentication; preshared key is currently the only
option. For more information on IKE proposals, see IKE Management, on page 121.
ike proposals set session_auth <PRESHARE> <ProposalName>
PRESHARE
Preshared key.
ProposalName
Name of the IKE proposal to which the session authentication parameter is added. To see
the proposal names in use, use the ike proposals list command.
Example:
ike proposals set session_auth preshare my_ike_proposal
IPSec Commands
The following commands allow you to define an IPSec connection without IKE. To read about IPSec Security,
see IPSec (Internet Protocol Security), on page 119.
Note: If you define a tunnel using IPSec commands, the keys will remain static. This could pose a security risk
and is not recommended. Use of IKE for key management is recommended.
IPSEC ADD
Defines an IPSec security association (SA) name.
ipsec add <SAname>
SAname
Example:
Name for the new IPSec SA.To see the IPSec SA names in use, use the ipsec list command.
ipsec add show_rx
IPSEC DEL
Deletes an existing IPSec security association (SA) name.
ipsec del <SAname>
SAname
Example:
Name for the IPSec SA to be deleted.To see the IPSec SA names in use, use the ipsec list
command.
ipsec del show_rx
IPSEC DISABLE
Disables a defined IPSec SA entry.
ipsec disable <SAname>
SAname
Name for the IPSec SA to be disabled.To see the IPSec SA names in use, use the ipsec list
command.
Chapter 5. Command Line Interface Reference
261