NGFW Command Line Interface Reference 163
Example
NGFW{running-ipsec}phase1 1 proposal propname
NGFW{running-phase1-proposal-propname}help
NGFW{running-phase1-proposal-propname}?
NGFW{running-ipsec}phase2
Enters phase2 proposal context.
Syntax
phase2 VERSION proposal NAME
Valid entries:
VERSION 1 (IKE Version 1)
2 (IKE Version 2)
proposal Phase1 proposal
NAME Phase1 proposal name : alphanumeric, underscore, dash excluding 'all'
Example
NGFW{running-ipsec}phase2 1 proposal propname
NGFW{running-phase2-proposal-propname}
NGFW{running-ipsec}policy
Enters IPSec Policy sub-context.
Syntax
policy NAME [PRIORITY]
Valid entries:
NAME IPsec Policy Name : alphanumeric, underscore, and dash excluding 'all'
PRIORITY Priority for NEW policy (1-5989)
Example
NGFW{running-ipsec}policy mypolicy 1
NGFW{running-ipsec-policy-mypolicy}
NGFW{running-ipsec}pre-shared-key
Configures pre-shared key (start with 0x for hexadecimal key).
Syntax
pre-shared-key local (A.B.C.D|X:X::X:X|LFQDN) remote (A.B.C.D|X:X::X:X|RFQDN|any)
Valid entries:
local Configure local host
A.B.C.D Local Peer IPv4 address
X:X::X:X Local Peer IPv6 address
LFQDN Hostname or user fqdn
remote Configure remote host
A.B.C.D Remote Peer IPv4 address
X:X::X:X Remote Peer IPv6 address
RFQDN Hostname or user fqdn
any any remote IP Address
Example
NGFW{running-ipsec}pre-shared-key local 100:0:0:0:0:0:0:1 remote
2001:db8:0:0:0:0:0:1
Commentaires sur ces manuels