TMS zl Management and Configuration Guide ST.1.2.100916

A-149
Command-Line Reference
IPsec Policy Context
spi. This command sets the decimal number that uniquely identifies this
IPsec SA. You must match the SPI on the remote gateway. (In log files and
packet sniffers, this number may be represented in hexadecimal.)
Syntax: spi <number>
Replace <number> with a number between 256 and 2147483647 that will
represent this SA.
IPsec IRAS Context
This context includes the commands for configuring settings for the IPsec
Remote Access Server (IRAS), which provides IKE mode config. It is available
only when the TMS zl Module is in routing mode and when the IPsec policy
uses an IKEv1 policy of the client-to-site type.
Figure A-14. IPsec IRAS Context
You enter the IPsec IRAS context from the IPsec policy apply context. How-
ever, before you can enter the IPsec IRAS context, you must complete these
tasks:
■ Configure the IPsec policy’s traffic selector
■ Set the key exchange method to auto and specify the IKEv1 policy (which
must be the client-to-site type)