Belden Hirschmann EAGLE Referenzhandbuch Seite 651

Virtual Private Network (VPN)
50.1 ipsec
Parameter Value
P-17
initiator
responder
0..86400
P-18
300..86400
P-19
P-20
main
aggressive
1..1800
P-21
true
P-22
false
P-23
any
modp1024
modp1536
modp2048
modp3072
modp4096
ecp256
ecp384
ecp521
P-24
any
hmacmd5
hmacsha1
hmacsha256
hmacsha384
hmacsha512
P-25
any
des
des3
aes128
aes192
aes256
any
P-26
a.b.c.d
nu,nu-nu
any
P-27
a.b.c.d
nu,nu-nu
300..28800
P-28
P-29
any
modp1024
modp1536
modp2048
modp3072
modp4096
none
ecp256
ecp384
ecp521
P-30
any
hmacmd5
hmacsha1
hmacsha256
hmacsha384
hmacsha512
192
Meaning
Initiates an IKE at startup.
Peer starts the IKE initiation.
Interval between liveness messages in seconds, 0 to disable.
Lifetime of IKE SA in seconds (Max. 24h).
Initiates or Accepts main mode only.
Initiates or Accepts aggressive mode.
Margintime for re-keying before timeout.
True
False
Accept all algorithms as responder, use default as initiator.
RSA with 1024 bits modulus (DH Group 2).
RSA with 1536 bits modulus (DH Group 5).
RSA with 2048 bits modulus (DH Group 14).
RSA with 3072 bits modulus (DH Group 15).
RSA with 4096 bits modulus (DH Group 16).
NIST Elliptic Curve with 256 bits (DH Group 19).
NIST Elliptic Curve with 384 bits (DH Group 20).
NIST Elliptic Curve with 521 bits (DH Group 21).
Accept all algorithms as responder, use default as initiator.
HMAC-MD5
HMAC-SHA1
HMAC-SHA256
HMAC-SHA384
HMAC-SHA512
Accept all algorithms as responder, use default as initiator.
DES
Triple-DES
AES with 128 key bits.
AES with 192 key bits.
AES with 256 key bits.
Use the primary IP address of external interface.
a.b.c.d IP address.
host.name.domain FQDN
Use the primary IP address of external interface.
a.b.c.d IP address.
host.name.domain FQDN
Lifetime of IPsec SA in seconds (Max. 8h).
Accept all algorithms as responder, use default as initiator.
RSA with 1024 bits modulus (DH Group 2).
RSA with 1536 bits modulus (DH Group 5).
RSA with 2048 bits modulus (DH Group 14).
RSA with 3072 bits modulus (DH Group 15).
RSA with 4096 bits modulus (DH Group 16).
No perfect forward secrecy.
NIST Elliptic Curve with 256 bits (DH Group 19).
NIST Elliptic Curve with 384 bits (DH Group 20).
NIST Elliptic Curve with 521 bits (DH Group 21).
Accept all algorithms as responder, use default as initiator.
HMAC-MD5
HMAC-SHA1
HMAC-SHA256
HMAC-SHA384
HMAC-SHA512
RM CLI EAGLE20/30
Release 04.1 03/2021