Configuration manual

Appendix G Command Interpreter 285
Nortel Business Secure Router 252 Configuration — Advanced
load <rule index>
Edit an IPSec branch office rule with the
specified rule number.
save
Saves the IPSec branch office rule.
config
Uses these commands to configure the
IPSec rule.
name <name>
Sets the name of the rule.
active <Yes|No>
Turns the rule on or off.
negotiationMode <0:Main |
1:Aggressive>
Sets the negotiation mode.
natTraversal <Yes|No>
Turns NAT traversal on or off.
p1MultiPro <Yes|No>
Turns phase 1 multiple proposal on or off.
lcIdType <0:IP | 1:DNS |
2:Email>
Sets the local ID type.
lcIdContent <content>
Sets the local ID content.
myIpAddr <IP address>
Sets the My IP Address.
peerIdType <0:IP | 1:DNS |
2:Email>
Sets the peer ID type.
peerIdContent <content>
Sets the peer ID content.
secureGwAddr <IP address |
Domain name>
Sets the secure gateway address.
authMethod <0:PreSharedKey
|1:
RSASignature>
Sets the authentication method.
certificate <certificate
name>
Specifies the certificate to use for
authentication.
preShareKey <ASCII | 0xHEX>
Types 8 to 32 case-sensitive ASCII
characters or 16 to 62 hexadecimal (0-9,
A-F) characters (preceded by 0x (zero x),
which is not counted as part of the 16 to
62 characters).
p1EncryAlgo <0:DES | 1:3DES
| 2:AES>
Sets the phase 1 encryption algorithm.
p1AuthAlgo <0:MD5 |
1:SHA1>
Sets the phase 1 authentication
algorithm.
p1SaLifeTime <seconds>
Sets the phase 1 SA lifetime.
keyGroup <0:DH1 | 1:DH2>
Sets the key group for phase 1 IKE setup.
Table 68 IPSec commands
Command Description