Nortel 7 - Page 160

160 Chapter 8 Configuring IPSec mobility and persistent mode
NN46110-500
To view the IPSec configuration for the group, for example Base:
CES(config)#show groups ipsec "/Base"
IPSEC Settings:
Rekey Timeout : 08:00:00
Rekey Data Count : 0
Perfect Forward Secrecy : Enabled
Banner : Not
Configured
Domain name : Not
Configured
Display Banner : Disabled
Compression : Enabled
Primary DNS Address : 0.0.0.0
Primary WINS Address : 0.0.0.0
Secondary DNS Address : 0.0.0.0
Secondary WINS Address : 0.0.0.0
Allow Clients : ALL
Allow undefined networks for non-Contivity clients : Enabled
Allow Password Storage on Client : Disabled
ESP - AES 256 with SHA1 Integrity : Disabled
ESP - AES 128 with SHA1 Integrity : Disabled
ESP - Triple DES with SHA1 Integrity : Disabled
ESP - Triple DES with MD5 Integrity : Disabled
ESP - 56-bit DES with SHA1 Integrity : Disabled
ESP - 56-bit DES with MD5 Integrity : Disabled
ESP - 40-bit DES with SHA1 Integrity : Disabled
ESP - 40-bit DES with MD5 Integrity : Disabled
ESP - NULL (Authentication Only) with SHA1 Integrity : Enabled
ESP - NULL (Authentication Only) with MD5 Integrity : Enabled
AH - Authentication Only (HMAC-SHA1) : Disabled
AH - Authentication Only (HMAC-MD5) : Disabled
IKE 56-bit DES with Group 1 (768-bit prime) : Enabled
IKE Triple DES with Group 2 (1024-bit prime) : Disabled
IKE Triple DES with Group 7 (ECC 163-bit field) : Disabled
IKE AES 128 with Group 5 (1536-bit prime) : Disabled
IKE AES 128 with Group 8 (ECC 283-bit field) : Disabled
ISAKMP Initial Contact Payload Accept : Disabled
Client Failover Tuning : Enabled
Client Failover Tuning Interval : 00:01:00
Client Failover Tuning Max Number of Retransmissions : 3
Client NAT Interval : Disabled
Client Auto Connect : Disabled
Client Auto Connect Type : Any Network
Traffic
Client Auto Connect Networks : Not
Configured
Client Auto Connect Domains : Not