Tunnel end point setting
msh> ipsec manual {1|2|3|4|default} tunneladdar "beginning IP address" "ending
IP address"
• Enter the separate setting number [1-4] or [default] and specify the tunnel end point beginning
and ending IP address.
• Not specifying either the beginning or ending address displays the current settings.
Authentication algorithm and authentication key settings
msh> ipsec manual {1|2|3|4|default} auth {hmac-md5|hmac-sha1|hmac-sha256|hmac-
sha384|hmac-sha512} "authentication key"
• Enter the separate setting number [1-4] or [default] and specify the authentication algorithm,
and then set the authentication key.
• If you are setting a hexadecimal number, attach 0x at the beginning.
• If you are setting an ASCII character string, enter it as is.
• Not specifying either the authentication algorithm or key displays the current setting. (The
authentication key is not displayed.)
Encryption algorithm and encryption key setting
msh> ipsec manual {1|2|3|4|default} encrypt {null|des|3des|aes128|aes192|
aes256} "encryption key"
• Enter the separate setting number [1-4] or [default], specify the encryption algorithm, and
then set the encryption key.
• If you are setting a hexadecimal number, attach 0x at the beginning. If you have set the
encryption algorithm to [null], enter an encryption key of arbitrary numbers 2-64 digits long.
• If you are setting an ASCII character string, enter it as is. If you have set the encryption
algorithm to [null], enter an encryption key of arbitrary numbers 1-32 digits long.
• Not specifying an encryption algorithm or key displays the current setting. (The encryption key
is not displayed.)
Reset setting values
msh> ipsec manual {1|2|3|4|default|all} clear
• Enter the separate setting number [1-4] or [default] and reset the specified setting. Specifying
[all] resets all of the settings, including default.
ipsec ike
To display or specify the encryption key auto exchange settings, use the "ipsec ike" command.
Display current settings
msh> ipsec ike {1|2|3|4|default}
5. Enhanced Network Security
164
To Next Page
Loading...
Need help?
General
