Belden Hirschmann EAGLE Referenzhandbuch Seite 650

informational: Enable or disable debug of informational messages.
not-handled: Enable or disable debug of not handled messages.
access: IPsec VPN access.
[method]: Authentication method to be used.
[pre-shared-key]: Preshared key (passphrase).
[local-type]: Type of local peer identifier.
[local-id]: Local peer identifier.
[remote-type]: Type of remote peer identifier.
[remote-id]: Remote peer identifier.
key-exchange: Key exchange parameters.
mode: Key exchange mode.
[protocol]: Version of the key exchange protocol.
[startup]: Key exchange at startup.
[dpd-timeout]: Dead peer detection timeout.
[lifetime]: IKE security association lifetime.
[exchange-mode]: IKE exchange mode.
[margintime]: IKE and IPsec margintime for re-keying before timeout.
[re-authenticate]: Re-authenticate at end of IKE lifetime (IKEv2 only).
algorithms: Key exchange algorithms.
[key-agreement]: Key agreement algorithm to be used.
[integrity]: Integrity (MAC) algorithm to be used in IKEv2.
[encryption]: Encryption algorithm to be used.
endpoints: IPsec VPN tunnel endpoints.
[local-address]: Address of local security gateway.
[remote-address]: Address of remote security gateway.
data-exchange: Data exchange parameters.
mode: Data exchange mode.
[lifetime]: Lifetime of IPsec SA.
algorithms: Data exchange algorithms.
[key-agreement]: Key agreement algorithm to be used.
[integrity]: Integrity (MAC) algorithm to be used in IPsec.
[encryption]: Algorithm to be used for IPsec payload encryption.
Parameter Value
1..256
P-1
P-2 string
P-3 string
string
P-4
string
P-5
string
P-6
P-7 string
P-8 debug_inform
debug_unhandled
P-9
P-10
psk
x509rsa
pkcs12
string
P-11
P-12
default
address
id
P-13 string
P-14
any
address
id
P-15 string
P-16
auto
v1
v2
RM CLI EAGLE20/30
Release 04.1 03/2021
Meaning
VPN connection index.
Enter a user-defined text, max. 128 characters.
Filename.
Filename.
Filename.
Filename.
Enter a user-defined text, max. 128 characters.
debug informational
debug unhandled
Pre-shared key.
Individual X.509 RSA certificates.
Single PKCS12 file with all certificates (including CA).
Enter a user-defined text, max. 128 characters.
Local IPv4 address.
IPv4 address or host name (use from address field).
Use identifier.
Enter a user-defined text, max. 255 characters.
Not checked.
IPv4 address or host name (use from address field).
Use identifier.
Enter a user-defined text, max. 255 characters.
Accept IKEv1/v2 as responder, start with IKEv2 as initiator.
IKE version 1 (ISAKMP).
IKE version 2.
Virtual Private Network (VPN)
50.1 ipsec
191