Belden Hirschmann EAGLE40-03 Referenzhandbuch Seite 614

Parameter Value
P-6 string
string
P-7
debug_inform
P-8
debug_unhandled
P-9
P-10 psk
x509rsa
pkcs12
string
P-11
default
P-12
address
id
P-13 string
any
P-14
address
id
P-15 string
auto
P-16
v1
v2
P-17 initiator
responder
0..86400
P-18
300..86400
P-19
main
P-20
aggressive
P-21 1..1800
P-22 true
false
any
P-23
modp1024
modp1536
modp2048
modp3072
modp4096
any
P-24
hmacmd5
hmacsha1
hmacsha256
hmacsha384
hmacsha512
P-25 any
des
des3
aes128
aes192
aes256
P-2 any
a.b.c.d
nu,nu-nu
P-27 any
a.b.c.d
nu,nu-nu
P-28 300..28800
any
P-29
modp1024
modp1536
modp2048
modp3072
modp4096
none
P-30 any
hmacmd5
hmacsha1
hmacsha256
hmacsha384
hmacsha512
RM CLI EAGLE40-03
Release 04.1 03/2021
Meaning
Filename.
Enter a user-defined text, max. 128 characters.
debug informational
debug unhandled
Pre-shared key.
Individual X.509 RSA certificates.
Single PKCS12 file with all certificates (including CA).
Enter a user-defined text, max. 128 characters.
Local IPv4 address.
IPv4 address or host name (use from address field).
Use identifier.
Enter a user-defined text, max. 255 characters.
Not checked.
IPv4 address or host name (use from address field).
Use identifier.
Enter a user-defined text, max. 255 characters.
Accept IKEv1/v2 as responder, start with IKEv2 as initiator.
IKE version 1 (ISAKMP).
IKE version 2.
Initiates the IKE at startup.
Peer starts the IKE initiation.
Interval between liveness messages in seconds, 0 to disable.
Lifetime of IKE SA in seconds (max. 24h).
Initiates or accepts main mode only.
Initiates or accepts aggressive only.
Margintime for re-keying before timeout.
True
False
Accept all algorithms as responder, use default as initiator.
RSA with 1024 bits modulus.
RSA with 1536 bits modulus.
RSA with 2048 bits modulus.
RSA with 3072 bits modulus.
RSA with 4096 bits modulus.
Accept all algorithms as responder, use default as initiator.
HMAC-MD5
HMAC-SHA1
HMAC-SHA256
HMAC-SHA384
HMAC-SHA512
Accept all algorithms as responder, use default as initiator.
DES
Triple-DES
AES with 128 key bits.
AES with 192 key bits.
AES with 256 key bits.
Use the primary IP address of external interface.
a.b.c.d IP address.
host.name.domain FQDN
Use the primary IP address of external interface.
a.b.c.d IP address.
host.name.domain FQDN
Lifetime of IPsec SA in seconds (Max. 8h).
Accept all algorithms as responder, use default as initiator.
RSA with 1024 bits modulus.
RSA with 1536 bits modulus.
RSA with 2048 bits modulus.
RSA with 3072 bits modulus.
RSA with 4096 bits modulus.
No perfect forward secrecy.
Accept all algorithms as responder, use default as initiator.
HMAC-MD5
HMAC-SHA1
HMAC-SHA256
HMAC-SHA384
HMAC-SHA512
167