
7 - 28 WiNG CLI Reference Guide
Parameters
ipsec Configures IPSEC policies
[security-association|
transform-set]
Configures IPSEC security associations and transform set.
• security-association – Defines the lifetime (in kilobytes and/or seconds)
of the IPSec SAs created
• lifetime [kilobyte | seconds] – Specifies how many kilobyte/
seconds an IKE SA lasts before it expires. Values can be entered in both
kilobytes and seconds. Which ever limit is reached first, ends the
security association
• kilobytes – Volume-based key duration, the minimum is 500 KB
and the maximum is 2147483646 KB
• seconds – Time-based key duration, the minimum is 90 seconds
and the maximum is 2147483646 seconds
• transform-set [set name] – Uses the crypto ipsec transform-set
command to define the transform configuration (authentication and
encryption) for securing data
• ah-md5-hmac – AH-HMAC-MD5 transform
• ah-sha-hmac – AH-HMAC-SHA transform
• esp-3des – ESP transform using 3DES cipher (168 bits)
• esp-aes – ESP transform using AES cipher
• esp-aes-192 – ESP transform using AES cipher (192 bits)
• esp-aes-256 – ESP transform using AES cipher (256 bits)
• esp-des – ESP transform using DES cipher (56 bits)
• esp-md5-hmac – ESP transform using HMAC-MD5 auth
• esp-sha-hmac – ESP transform using HMAC-SHA auth
The transform set is then assigned to a crypto map using the map’s set
transform-set command.
Comentarios a estos manuales