AMX NI-3100 Spezifikationen PDF herunterladen (Seite 144)

Appendix A: IPSec Configuration File

134

NetLinx Integrated Controllers- WebConsole & Programming Guide (FMv3)

spdSetSA

NAME spdSetSA – create an SA proposal in the SPD– create an SA proposal in the SPD

SYNOPSIS

spdSetSA=pConfStr

DESCRIPTION This rule creates an SA proposal in the SPD. An SA proposal is a list of proposals. IKE sends

the list to the peer during negotiation.

Rule Value Rule Value = pConfStr

A stringValue specifier formatted as follows:

saName,proposalName,proposalNumber[,proposalName,proposalNumber...]

where

- saName is unique Phase 2 SA name.

- proposalName is the name of an existing proposal with its attributes already set. You can

specify up to four proposal names.

- proposalNumber is the proposal number, which determines the ordering and combination of

proposals in the SA proposal.

When combining ESP and AH transforms, you may configure an ESP tunnel policy with an

AH tunnel policy, or an ESP transport policy with an AH transport policy, by using the same

proposal number for both policies.

EXAMPLES

spdSetSA=qm_sa_default,esp_tunnel,1,ah_tunnel,1,esp_tunnel_A,2,

esP_tunnel_B,3

spdSetSA=qm_sa_default,esp_transport,1,ah_transport,1

spdSetSA=qm_sa_default,esp_tunnel,1,ah_tunnel,2

Config String

Format

saName, proposalName,proposalNumber[,proposalName,proposalNumber…]

Pre-defined

Security 

Association

(SA) proposal

names

The following are Phase II SA proposal names already defined inside the AMX Firmware and

available for use.

qm_sa_g1_transport=esp_g1_transport,1,ah_g1_transport,2

qm_sa_g2_transport=esp_g2_transport,1,ah_g2_transport,2

qm_sa_g1_tunnel=esp_g1_tunnel,1,ah_g1_tunnel,2

qm_sa_g2_tunnel=esp_g2_tunnel,1,ah_g2_tunnel,2

1 2 ... 139 140 141 142 143 144 145 146 147 148 149 ... 159 160

Keine Kommentare

AMX NI-3100 Spezifikationen Seite 144