Alcatel-Lucent OmniAccess 5740 - Page 940

IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
914
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
T
O CONFIGURE A CLIENT PROFILE
Following are the default values for a newly configured crypto client profile:
• Default IKE policy in a client profile: ‘default’ IKE policy
• Default transform set: ‘default’ transform set
• Default PFS group: pfs group2.
• Default IPsec security-association lifetime in seconds: 28800
E
XAMPLE
ALU(config)# crypto client profile myclientprofile
ALU(config-client-prof-myclientprofile)#
ALU(config)# no crypto client profile myclientprofile
T
O ATTACH A CLIENT OBJECT TO A CLIENT PROFILE
EXAMPLE
ALU(config-client-prof-myclientprofile)# client-object
myclientobject
ALU(config-client-prof-myclientprofile)# no client-object
myclientobject
T
O ATTACH AN IKE POLICY TO A CLIENT PROFILE
EXAMPLE
ALU(config-client-prof-myclientprofile)# ike-policy IKE1
Command (in CM) Description
crypto client profile <name> This command is used to configure
a new crypto client profile.
no crypto client profile <name> This command is used to delete a
client profile.
Command (in Client Profile CM) Description
client-object <name> This command is used to attach an already
configured client object to a client profile.
no client-object <name> The ‘no’ command detaches the specified
client object attached to the profile.
Command (in Client Profile CM) Description
ike-policy <name> This command is used to attach an already
configured IKE policy to a client profile.