Alcatel-Lucent OmniAccess 5740 - Page 938

IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
912
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
T
O ATTACH A LIST TO A CRYPTO CLIENT OBJECT
EXAMPLE
The following example shows a list with only host attached a crypto client object.
ALU(config)# list L1 host 192.168.1.1
ALU(config)# end
ALU(config)# crypto client object myclientobject
ALU(config-client-obj-myclientobject)# Client-IP-list L1
T
O CONFIGURE KEEP ALIVE INTERVAL
EXAMPLE
ALU(config-client-obj-myclientobject)# keep-alive 30
Command (in Client Object CM) Description
Client-IP-list <list-name> This command is used to attach a
pre-configured list that contains a list
of IP addresses to be assigned to
the IPsec clients.
Note: The list should contain
only host or only prefix
or a combination of
both.
For more information on
configuring list and its
rule, refer to the
“Common Classifiers”
chapter in this guide.
Command (in Client Object CM) Description
keep-alive <1-60> This command is used to configure
time interval at which both client and
the server sends a keep alive
message.
If a keep alive message is not
received by either the client/server
within the configured keep alive
interval, client/server waits for three
times the keep-alive period, after
which the IPsec client connection is
brought down.
The default keep-alive value is 60
seconds.