ELTEX ESR-3100 - Page 190

ESR series service routers.ESR-Series. User manual
190
•
•
•
•
Step Description Command Keys
18 Bind IKE policy to IKE gateway. esr(config-ike-gw)# ike-policy
<NAME>
<NAME> – IKE protocol policy
name, set by the string of up to
31 characters.
19 Specify IKE version (optional). esr(config-ike-gw)# version
<VERSION>
<version> – IKE protocol
version: v1-only or v2-only.
Default value: v1-only.
20 Set the route-based mode. esr(config-ike-gw)# mode route-
based
21 Specify the action for
DPD (optional).
esr(config-ike-gw)# dead-peer-
detection action <MODE>
<MODE> – DPD operation
mode:
restart – connection
restarts;
clear – conection stops;
hold – connection holds;
none – the mechanism
is disabled, no action is
taken.
Default value: none.
22 Specify the interval between sending
messages via DPD mechanism
(optional).
esr(config-ike-gw)# dead-peer-
detection interval <SEC>
<SEC> – interval between
sending messages via DPD
mechanism, takes values of
[1..180] seconds.
Default value: 2.
23 Specify the time period of response to
DPD mechanism messages (optional).
esr(config-ike-gw)# dead-peer-
detection timeout <SEC>
<SEC> – time interval of
response to DPD mechanism
messages, takes values of
[1..180] seconds.
Default value: 30 seconds.
24 Bind VTI tunnel to IKE gateway. esr(config-ike-gw)# bind-interface
vti <VTI>
<VTI> – VTI ID.
25 Create IPsec profile. esr(config)# security ipsec
proposal <NAME>
<NAME> – IPsec protocol
profile name, set by the string
of up to 31 characters.