IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
846
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
T
O VIEW THE CRYPTO CONFIGURATION ON OMNIACCESS 5740 USG
E
XAMPLE
ALU(config)# show crypto
crypto ike identity exampleIdentity
peer-id user-fqdn fred@flintstones.com
my-id fqdn @flintstones.com
my-cert cert_flintstones
crypto ike key topSecret peer 100.1.200.4
crypto ike key anotherTopSecret peer 126.2.34.68
crypto ike dpd interval 15 timeout 60
!crypto ike policy default
! proposal md5-des
! ipsec security-association lifetime seconds 28800
! lifetime seconds 86400
! pfs group2
crypto ike policy examplePolicy
proposal sha1-aes256
ipsec security-association lifetime seconds 28800
lifetime seconds 7200
pfs group5
authentication pre-shared
! Policy in Use (by 1 cryptomap/s)
!crypto ipsec transform-set default
! esp-md5-des esp-sha1-des
crypto ipsec transform-set exampleT-set esp-sha1-aes192 esp-md5-aes192
! Transform-Set in Use (by 1 cryptomap/s)
crypto map exampleMap ipsec-ike examplePolicy
peer 100.1.200.4
match exampleMatchList
transform-set exampleT-set
pfs group5
lifetime seconds 3600
lifetime kilobytes 4096
! Applied to : GigabitEthernet3/1
interface GigabitEthernet3/1
crypto map exampleMap
!crypto ipsec profile default
! ike-policy default
! transform-set default
! pfs group2
! lifetime seconds 28800
! Not Applied to Any Interface
Command (in SUM/CM) Description
show crypto This command displays all the
configuration details related to IPsec
including the default configurations.
To Next Page
Loading...
