ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka Strana 139

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 386
  • Tabulka s obsahem
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 138
Chapter 16 IPSec VPN
ZyWALL (ZLD) CLI Reference Guide
139
16.2.2 IPSec SA Commands (except Manual Keys)
This table lists the commands for IPSec SAs, excluding manual keys (VPN connections using
VPN gateways).
Table 69 crypto Commands: IPSec SAs
COMMAND DESCRIPTION
[no] crypto ignore-df-bit Fragment packets larger than the MTU (Maximum
Transmission Unit) that have the “don’t” fragment”
bit in the header turned on. The no command has
the ZyWALL drop packets larger than the MTU that
have the “don’t” fragment” bit in the header turned
on.
show crypto map [map_name] Shows the specified IPSec SA or all IPSec SAs.
crypto map dial map_name Dials the specified IPSec SA manually. This
command does not work for IPSec SAs using
manual keys or for IPSec SAs where the remote
gateway address is 0.0.0.0.
[no] crypto map map_name Creates the specified IPSec SA if necessary and
enters sub-command mode. The
no command
deletes the specified IPSec SA.
crypto map rename map_name map_name Renames the specified IPSec SA (first map_name)
to the specified name (second map_name).
crypto map map_name
activate
deactivate
Activates or deactivates the specified IPSec SA.
ipsec-isakmp policy_name Specifies the IKE SA for this IPSec SA and
disables manual key.
encapsulation {tunnel | transport} Sets the encapsulation mode.
transform-set esp_crypto_algo
[esp_crypto_algo [esp_crypto_algo]]
Sets the active protocol to ESP and sets the
encryption and authentication algorithms for each
proposal.
esp_crypto_algo: {esp-3des-md5 | esp-3des-
sha | esp-aes128-md5 | esp-aes128-sha | esp-
aes192-md5 | esp-aes192-sha | esp-aes256-md5 |
esp-aes256-sha | esp-des-md5 | esp-des-sha |
esp-null-md5 | esp-null-sha}
transform-set {ah-md5 | ah-sha} [{ah-md5 |
ah-sha} [{ah-md5 | ah-sha}]]
Sets the active protocol to AH and sets the
encryption and authentication algorithms for each
proposal.
Zobrazit stránku 138
1 2 ... 134 135 136 137 138 139 140 141 142 143 144 ... 385 386

Komentáře k této Příručce

Žádné komentáře