ZyXEL Communications ZyWALL 310 - 33.2.3 IPv4 IPSec SA Commands (for Manual Keys)

Chapter 33 IPSec VPN
ZyWALL Series CLI Reference Guide
285
33.2.3 IPv4 IPSec SA Commands (for Manual Keys)
This table lists the additional commands for IPSec SAs using manual keys (VPN connections using manual
keys).
Table 149 crypto map Commands: IPSec SAs (Manual Keys)
COMMAND DESCRIPTION
crypto map map_name
set session-key {ah <256..4095>
auth_key | esp <256..4095>
[cipher enc_key] authenticator
auth_key}
Sets the active protocol, SPI (<256..4095>), authentication
key and encryption key (if any).
auth_key: You can use any alphanumeric characters or
,;|`~!@#$%^&*()_+\{}':./<>=-".
The length of the key
depends on the algorithm.
md5 - 16-20 characters
sha - 20 characters
sha256 - 32 characters
sha512 - 64 characters
enc_key: You can use any alphanumeric characters or
,;|`~!@#$%^&*()_+\{}':./<>=-". The length of the key
depends on the algorithm.
des - 8-32 characters
3des - 24-32 characters
aes128 - 16-32 characters
aes192 - 24-32 characters
aes256 - 32 characters
If you want to enter the key in hexadecimal, type “0x” at the
beginning of the key. For example, "0x0123456789ABCDEF" is
in hexadecimal format; in “0123456789ABCDEF” is in ASCII
format. If you use hexadecimal, you must enter twice as
many characters.
The Zyxel Device automatically ignores any characters
above the minimum number of characters required by the
algorithm. For example, if you enter
1234567890XYZ for
a DES encryption key, the Zyxel Device only uses
12345678. The Zyxel Device still stores the longer key.
local-ip ip
Sets the local gateway address to the specified IP address.
peer-ip ip
Sets the remote gateway address to the specified IP address.