6: Basic Parameters
SLCâ„¢ 8000 Advanced Console Manager User Guide 85
3. To save, click Apply button.
4. To see a details of the VPN tunnel connection, including the cryptographic algorithms used,
select the View Detailed Status link.
5. To see the last 100 lines of the logs associated with the VPN tunnel, select the View VPN
Logs link.
6. To see the RSA public key for the SLC 8000 advanced console manager (required for
configuring the remote host if RSA Public Keys are being used), select the View SLC RSA
Public Key link.
7. To see the X.509 Certificates for the SLC 8000 advanced console manager, select the View
X.509 Certificates link.
Configuring an IPsec VPN Tunnel through the CLI
1. Set vpn <parameters>:
tunnel <enable|disable>
ethport <1|2>
auth <rsa|psk|x509>
remotehost <RemoteHost IP Address or name>
remoteid <Authentication name>
remotehop <IP Address>
remotesubnet <one or more subnets in CIDR notation>
localid <Authentication Name>
localhop <IP Address>
localsubnet <one or more subnets in CIDR notation>
ikenegotation <main|aggressive>
ikeenc <any|3des|aes>
ikeauth <any|sha1|md5|sha2_256|sha2_512>
ikedhgroup <any|dh2|dh5|dh14|dh15>
espenc <any|3des|aes>
espauth <any|sha1|md5|sha2_256|sha2_512>
espdhgroup <any|dh2|dh5|dh14|dh15>
pfs <enable|disable>
lifetime <SA Lifetime in Seconds>
modeconfig <enable|disable>
xauthclient <enable|disable>
xauthlogin <User Login>
Dead Peer Detection Sets the delay (in seconds) between Dead Peer Detection (RFC 3706)
keepalives (R_U_THERE, R_U_THERE_ACK) that are sent for the tunnel
(default 30 seconds). Dead Peer Detection can also be disabled.
Dead Peer Detection
Timeout
Sets the length of time (in seconds) the SLC will idle without hearing either
an R_U_THERE poll from the peer, or an R_U_THERE_ACK reply. The
default is 120 seconds. After this period has elapsed with no response and
no traffic, the SLC will declare the peer dead, remove the Security
Association (SA), and perform the action defined by Dead Peer Detection
Action.
Dead Peer Detection Action When a Dead Peer Detection enabled peer is declared dead, the action that
should be taken. Hold (the default) means the tunnel will be put into a hold
status. Clear means the Security Association (SA) will be cleared. Restart
means the SA will immediately be renegotiated.