Zte ZXR10 - Key Configuration Areas

Chapter6IPSecIPv4NetworkSafecommands
ExampleThisexampledescribeshowtocreateIPSecsecuritypolicyand
thendeleteallpolicies.
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#exit
ZXR10(config)#showcryptomapmymap
CryptoMap"zhuys"1ipsec-isakmp:
Peer:notconfigure
accesslist:notconfigure
Securityassociationlifetime:1843200000kilobytes
/28800seconds
DHgroup :none
pfslevel(None/key-identity):none
Transformsets:{
}
nesting:0
Dynamicmaptemplatetag:notconfigure
Local-addressloopback:none
ZXR10(config)#nocryptomapmymap123
ZXR10(config)#cryptomapmymap111isakmp
ZXR10(config-crypto-map)#end
ZXR10#clearcryptomapmymap
Related
Commands
cryptomap
showcryptomap
cryptodynamic-map
PurposeUsethiscommandtoaddordeletedynamicsecuritypolicy.
CommandModesGlobalconguration
Syntaxcryptodynamic-map<dynamic-map-name><dynamic-seq-nu
mber>
nocryptodynamic-map<dynamic-map-name><dynamic-seq
-number>
Syntax
Description
<dynamic-map-na
me>
Dynamicsecuritypolicymapname,astring
lessthan18characters
<dynamic-seq-numb
er>
Dynamicpolicysequencenumber ,range:
1~65535
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�Legalcharactersofdynamicsecuritypolicymapnameinclude
alphabet,numberandunderline.Charactersarenotcasesen-
sitive.
�Ifthedynamicpolicyhasbeenappliedonsomestaticpolicy
map,asingledynamicpolicymustnotbedirectlydeleted.The
applicationofdynamicpolicymaponstaticpolicymapmustbe
cancelledrstbeforethedynamicpolicyisdeleted.
�Thesequencerangeis1~65535.However ,thenumberofdy-
namicpoliciesisnotmorethan60.Thevalueofsequence
numberincludespriority.Thesmallerthesequencenumber
is,thelargerthepriorityis.
CondentialandProprietaryInformationofZTECORPORATION67