ELTEX ESR-1000 - Page 214

ESR series service routers.ESR-Series. User manual
214
•
•
•
•
Step Description Command Keys
48 Set the level of margin seconds,
margin packets, margin kilobytes
values random spread (optional).
esr(config-ipsec-vpn)# ike rekey
randomization <VALUE>
<VALUE> – maximum ratio of
values spread, takes values of
[1..100].
Default value: 100
49 Describe VPN (route). esr(config-ipsec-vpn)#
description <DESCRIPTION>
<DESCRIPTION> – profile
description, set by the string of
up to 255 characters.
50 Enable IPsec VPN. esr(config-ipsec-vpn)# enable
51 Enable XAUTH clients reconnection
mode with one login/password (server
only) (optional).
esr(config-ipsec-vpn)#security
ike session uniqueids <MODE>
<MODE> – reconnect mode, may
take the following values:
no – established XAUTH
connection will be deleted
if an «INITIAL_CONTACT»
notification is sent for a
new XAUTH connection by
the initiator of the
connection, the previously
used IP address will be
assigned. Otherwise, the
established XAUTH
connection will be
withheld. A new IP
address will be assigned
to the new XAUTH
connection.
never – established
XAUTH connection will be
withheld.A new IP
address will be assigned
to the new XAUTH
connection. The
«INITIAL_CONTACT»
notification will be ignored
anyway.
replace – established
XAUTH connection will be
deleted. The previously
used IP address will be
used for the new XAUTH
connection.
keep – established XAUTH
connection will be
withheld. A new XAUTH
connection will be
rejected.