ELTEX ESR-3100 User Manual

ESR series service routers.ESR-Series. User manual
202
•
•
•
Step Description Command Keys
30 Create IPsec VPN policy and switch to
its configuration mode.
esr(config)# security ipsecvpn
<NAME>
<NAME> – VPN name, set by
the string of up to 31
characters.
31 Define the matching mode of data
required for VPN enabling.
esr(config-ipsec-vpn)# mode
<MODE>
<MODE> – VPN operation
mode.
32 Bind IPsec policy to VPN. esr(config-ipsec-vpn)#ike ipsec-
policy <NAME>
<NAME> – IPsec policy name,
set by the string of up to 31
characters.
33 Set the DSCP value for the use in IP
headers of IKE outgoing packets
(optional).
esr(config-ipsec-vpn)#ike dscp
<DSCP>
<DSCP> – DSCP code value,
takes values in the range of
[0..63].
34 Set VPN activation mode. esr(config-ipsec-vpn)#ike
establish-tunnel <MODE>
<MODE> – VPN activation
mode:
by-request – connection
is enabled by an
opposing party;
route – connection is
enabled when there is
traffic routed to the
tunnel;
immediate – tunnel is
enabled automatically
after applying the
configuration.
35 Bind IKE gateway to VPN. esr(config-ipsec-vpn)# ike gateway
<NAME>
<NAME> – IKE gateway name,
set by the string of up to 31
characters.
36 Set the time interval value in seconds
after which the connection is closed, if
no packet has been received or sent via
SA (optional).
esr(config-ipsec-vpn)# ike idle-
time <TIME>
<TIME> – interval in seconds,
takes values of [4..86400].
37 Disable key re-approval before the IKE
connection is lost due to the timeout,
the number of transmitted packets or
bytes (optional).
esr(config-ipsec-vpn)# ike rekey
disable

ELTEX ESR-3100 Specifications

General

Brand	ELTEX
Model	ESR-3100
Category	Network Router
Language	English