TMS zl Management and Configuration Guide ST.1.1.100226

A-146
Command-Line Reference
IPsec Policy Context
The command is also available from other contexts accessed through the
IPsec policy context.
ip. To set the address that will be the clients’ remote gateway while visiting
the local network, enter the following command:
Syntax: ip < <IP address/mask> | host <IP address> >
Replace <IP address/mask> with the IP address (including the subnet
mask) that the TMS zl Module will use to route traffic from the remote clients.
Type an address in a subnet that you can reserve for the remote clients; this
subnet cannot be configured on a TMS VLAN.
If you select the host option, replace <IP address> with the IP address that
the TMS zl Module will use to route traffic from the remote clients. The IP
address must not be in use on a TMS VLAN.
firewall. This command sets the firewall zone for remote clients after they
receive their IKE mode config IP settings. Traffic received from the IKE mode
config addresses will use this zone as the source zone; traffic destined to these
addresses will use this address as the destination zone. To set the IRAS firewall
zone, enter the following command:
Syntax: firewall zone <zone>
Replace <zone> with one of the following:
■ self
■ internal
■ external
■ dmz
■ zone1
■ zone2
■ zone3
■ zone4
■ zone5
■ zone6
■ <user-named zone>