Belden Hirschmann EAGLE Referenzhandbuch Seite 649

Virtual Private Network (VPN)
50.1 ipsec
5 0 V ir t ua l Privat e N e t w ork (V PN )
5 0 .1 ipse c
Configure IPsec VPN settings.
5 0 .1 .1 ipse c c e rt ific a t e de le t e
Delete a certificate uploaded to the device.

Mode: Global Config Mode

Privilege Level: Administrator

Format: ipsec certificate delete <P-1>
Parameter Value
1..100
P-1
5 0 .1 .2 ipse c c e rt ific a t e uploa d pa ssphra se
Passphrase that will be used to decrypt the next uploaded file, before storing on the device (note: will not be stored
after the next upload, no matter if it is used or not!)

Mode: Global Config Mode

Privilege Level: Administrator

Format: ipsec certificate upload passphrase <P-1>
Parameter Value
string
P-1
5 0 .1 .3 ipse c c onne c t ion a dd
Add a IPsec VPN connection (use next free index if none submitted).

Mode: Global Config Mode

Privilege Level: Administrator

Format: ipsec connection add <P-1> [name <P-2>]
[name]: IPsec VPN connection name.
Parameter Value
1..256
P-1
P-2 string
5 0 .1 .4 ipse c c onne c t ion m odify
Modify a IPsec VPN connection (index in connection is mandatory).

Mode: Global Config Mode

Privilege Level: Administrator

Format: ipsec connection modify <P-1> name <P-2> certificate ca add <P-3> clear local
<P-4> [remote <P-5>] [privkey <P-6>] [passphrase <P-7>] debug informational <P-8>
not-handled <P-9> access [method <P-10>] [pre-shared-key <P-11>] [local-type <P-
12>] [local-id <P-13>] [remote-type <P-14>] [remote-id <P-15>] key-exchange mode
[protocol <P-16>] [startup <P-17>] [dpd-timeout <P-18>] [lifetime <P-19>]
[exchange-mode <P-20>] [margintime <P-21>] [re-authenticate <P-22>] algorithms
[key-agreement <P-23>] [integrity <P-24>] [encryption <P-25>] endpoints [local-
address <P-26>] [remote-address <P-27>] data-exchange mode [lifetime <P-28>]
algorithms [key-agreement <P-29>] [integrity <P-30>] [encryption <P-31>]
name: IPsec VPN connection name.
certificate: Manage certificates for this connection.
ca: Set the CA certificate file name(s). Also supports comma-separated chains.
add: Add a CA file name to the current connection.
clear: Remove all the CA file names added to the current connection.
local: Set the file name of the certificate that will identify the current device.
[remote]: Set the file name of the certificate that will identify the remote device.
[privkey]: Set the file name of the private key (if it is encrypted and cannot be automatically matched to the
certificate).
[passphrase]: Set the passphrase to be used with an encrypted private key or PKCS12 encrypted container
(warning: will be stored in the config!).
debug: IPsec VPN connection additonal debugging information to event log.
190
Meaning
Certificate Table Index.
Meaning
Enter a user-defined text, max. 128 characters.
Meaning
VPN connection index.
Enter a user-defined text, max. 128 characters.
RM CLI EAGLE20/30
Release 04.1 03/2021