ESR series service routers.ESR-Series. User manual
•
•
•
•
Step Description Command Keys
8 Specify a shared secret authentication
key that should be the same for both
parties of the tunnel.
esr(config-l2tp)# ipsec
authentication pre-shared-key
{ ascii-text { <TEXT> | encrypted
<ENCRYPTED-TEXT> } |
hexadecimal {<HEX> | encrypted
<ENCRYPTED-HEX> } }
<TEXT> – string [1..64] ASCII
characters;
<HEX> – number, [1..32] bytes
size, set by the string of [2..128]
characters in hexadecimal format
(0xYYYY ...) or (YYYY ...);
<ENCRYPTED-TEXT> – encrypted
password, [1..32] bytes size, set by
the string of [2..128] characters.
<ENCRYPTED-TEXT> – encrypted
number, [2..64] bytes size, set by
the string of [2..256] characters.
9 Restrict the authentication and
encryption methods used for the IKE
protocol (optional).
esr(config-l2tp)# ipsec ike
proposal <NAME>
<NAME> – name of the previously
created IKE profile, set by the
string of up to 31 characters.
10 Restrict the authentication and
encryption methods used for the
IPsec protocol (optional).
esr(config-l2tp)# ipsec proposal
<NAME>
<NAME> – name of the previously
created IPsec profile, set by the
string of up to 31 characters.
11 Specify UDP port number on which
the connection to the L2TP server is
established (optional).
esr(config-l2tp)# port <PORT> <PORT> – UDP port number, takes
values of [1024..65535].
Default value: 1701.
12 Enable the tunnel. esr(config-l2tp)# enable
10 Specify MTU size
(MaximumTransmissionUnit) for the
tunnel (optional).
esr(config-l2tp)# mtu <MTU> <MTU> – MTU value, takes values
in the range of:
for ESR-10/12V(F)/14VF –
[552..9600];
for ESR-20/21 –
[552..9500];
for
ESR-100/200/1000/1200/1
500/1511/1700 –
[552..10000]
for ESR-3100– [552..9190].
Default value: 1500.
11 Ignore the default route via the given
L2TP tunnel (optional).
esr(config-l2tp)# ignore-default-
route