Efficient Networks Router family Command line interface Specifiche Pagina 344

  • Scaricare
  • Aggiungi ai miei manuali
  • Stampa
  • Pagina
    / 379
  • Indice
  • SEGNALIBRI
  • Valutato. / 5. Basato su recensioni clienti
Vedere la pagina 343
344 Chapter 8. Command Reference
Example: ike ipsec proposals set espenc 3des myproposal
IKE IPSEC PROPOSALS SET IPCOMP
Sets the proposal parameter that requests either no compression or LZS compression. For more information, see
IKE IPSec Proposal Commands, on page 141.
ike ipsec proposals set > <ProposalName>
One of the following:
NONE No compression.
LZS Compress using the LZS algorithm.
ProposalName Name of the IPsec proposal to which the IP compression parameter is added. To see the
proposal names in use, use the ike ipsec proposals list command.
Example:
ike ipsec proposals set ipcomp none myproposal
IKE IPSEC PROPOSALS SET LIFEDATA
Sets the proposal parameter that specifies the maximum number of kilobytes for the IPSec SA; 0 means unlimited.
After the maximum data is transferred, IKE renegotiates the connection. By limiting the amount of data that can
be transferred, you reduce the likelihood of the key being broken.
For more information on proposal parameters, see IKE IPSec Proposal Commands, on page 141.
kbytes Maximum number of kilobytes transferred before renegotiation; 0 means unlimited.
ProposalName Name of the IPsec proposal to which the lifedata parameter is added. To see the proposal
names in use, use the ike ipsec proposals list command.
Example: ike ipsec proposals set lifedata 50000 myproposal
IKE IPSEC PROPOSALS SET LIFETIME
Sets the proposal parameter that specifies the length of time (in seconds) before the IPSec SA expires; the
recommended value is 86400 (24 hours). When the time limit expires, IKE renegotiates the connection.
For more information on proposal parameters, see IKE IPSec Proposal Commands, on page 141.
seconds Maximum number of seconds before renegotiation; 0 means unlimited.
ProposalName Name of the IPsec proposal to which the lifetime parameter is added. To see the proposal
names in use, use the ike ipsec proposals list command.
ike ipsec proposals set ipcomp <NONE | LZS> <ProposalName>
ike ipsec proposals set lifedata <kbytes> <ProposalName>
ike ipsec proposals set lifetime <seconds> <ProposalName>
Vedere la pagina 343
1 2 ... 339 340 341 342 343 344 345 346 347 348 349 ... 378 379

Commenti su questo manuale

Nessun commento