HP X Unified Security Platform Series Betriebsanweisung PDF herunterladen (Seite 82)

Chapter 3. Command Reference

74 X Family CLI Reference V 2.5.1

name an IKE

proposal and

enter its

context

Use configure terminal vpn ike proposal to create an IKE proposal, which also opens the context for

that proposal. In this example, an IKE proposal named london is created, and the next command line

is in the context of that proposal:

hostname# conf t vpn ike add london

hostname# conf t vpn ike proposal london

hostname(london)#

configure

phase 1

encryption

Use phase1-encryption within the context of the IKE proposal to configure phase 1 encryption. In

this example, phase 1 encryption to 3DES-CBC is set in the context of the proposal named london:

hostname# conf t vpn ike proposal london

hostname(london)# phase1-encryption 3des-cbc

conf t vpn ipsec

The configure terminal vpn ipsec command configures an IPSec VPN tunnel.

add name

configures the name for a new Security Association.

disable

disables IPSec.

enable

enables IPSec.

remove name

deletes the configuration of a Security Association.

sa name

takes you into the context of the named Security Association.

delete

brings down any tunnels using this Security Association.

disable

disables this Security Association.

enable

enables this Security Association.

Note: The name “Default” represents the default SA (Security Association).

In the command-line interface, you cannot renegotiate or delete a Security

Association terminating on the device if that device did not initiate that Security

Association.

1 2 ... 77 78 79 80 81 82 83 84 85 86 87 ... 141 142

Keine Kommentare

HP X Unified Security Platform Series Betriebsanweisung Seite 82