ELTEX ESR Series - Page 187

ESR-Series. User manual
187
Step Description Command Keys
35 Bind IKE gateway to VPN. esr(config-ipsec-vpn)# ike gateway
<NAME>
<NAME> – IKE gateway name,
set by the string of up to 31
characters.
36 Set the time interval value in seconds
after which the connection is closed, if
no packet has been received or sent via
SA (optionally).
esr(config-ipsec-vpn)# ike idle-
time <TIME>
<TIME> – interval in seconds,
takes values of [4..86400].
37 Disable key re-approval before the IKE
connection is lost due to the timeout,
the number of transmitted packets or
bytes (optionally).
esr(config-ipsec-vpn)# ike rekey
disable
38 Configure the start of IKE connection
keys re-approval before the expiration
of the lifetime (optionally).
esr(config-ipsec-vpn)# ike rekey
margin { seconds <SEC> |
packets <PACKETS> | kilobytes
<KB> }
<SEC> – time interval in
seconds remaining before the
connection release (set by the
lifetimeseconds command).
Takes values in the range of
[4..86400].
<PACKETS> – number of
packets remaining before the
connection release (set by the
lifetimepackets command).
Takes values in the range of
[4..86400].
<KB> – traffic volume in
kilobytes remaining before the
connection release (set by the
lifetimekilobytes command).
Takes values in the range of
[4..86400].
39 Set the level of margin seconds, margin
packets, margin kilobytes values
random spread (optionally).
esr(config-ipsec-vpn)# ike rekey
randomization <VALUE>
<VALUE> – maximum ratio of
values spread, takes values of
[1..100].
40 Describe VPN (optionally). esr(config-ipsec-vpn)# description
<DESCRIPTION>
<DESCRIPTION> – profile
description, set by the string of
up to 255 characters.
41 Enable IPsec VPN. esr(config-ipsec-vpn)# enable