AMX NI-3100 Especificaciones Pagina 137

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 160
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 136
Appendix A: IPSec Configuration File
127
NetLinx Integrated Controllers- WebConsole & Programming Guide (FMv3)
ikeSetPropAttrib
Security Policy Database (SPD)
spdAddTransport
ikeSetProp (Cont.)
Pre-defined
proposal
names (Cont.)
mm_des_sha=DES,SHA-1
mm_des_sha2_256=DES,SHA2-256
mm_des_sha2_384=DES,SHA2-384
mm_des_sha2_512=DES,SHA2-512
mm_des_md5=DES,MD5
mm_aes_sha=AES,SHA-1
mm_aes_sha2_256=AES,SHA2-256
mm_aes_sha2_384=AES,SHA2-384
mm_aes_sha2_512=AES,SHA2-512
mm_aes_md5=AES,MD5
ikeSetPropAttrib
NAME ikeSetPropAttrib – set attributes of an IKE Phase 1 proposal
SYNOPSIS
ikeSetPropAttrib=configString
DESCRIPTION This rule sets the attributes for a previously defined IKE Phase 1 proposal.
Rule Value: Rule Value = configString
A string formatted as follows:
proposalName,attributeType,attributeValue,[attributeType,attributeValue]...
proposalName is the name of an existing Phase 1 proposal. Valid attribute
Type/value pairs are shown in the following table:
Attribute Type Attribute Value
DHGROUP G1 for DH Group 1 or G2 for DH Group 2
UNITOFTIME SECS, MINS, or HRS for seconds, minutes or hours; default is minutes.
LIFETIME Default is 28800 seconds. If the lifetime is greater than 0 and less than
PHASE1_MIN_LIFE_IN_SECS, then it defaults to
PHASE1_MIN_LIFE_IN_SECS, which is defined in ike.h.
SOFTLIFETIME Default is 75% of the LIFETIME. If the soft lifetime is greater than 0 and
less than PHASE1_MIN_LIFE_IN_SECS then it defaults to
PHASE1_MIN_LIFE_IN_SECS, which is defined in ike.h.
EXAMPLES
ikeSetPropAttrib=mm_group2,DHGROUP,G2
ikeSetPropAttrib=mm_group2,LIFETIME,28880,UNITOFTIME,SECS
Config String
Format
proposalName,attributeType,attributeValue,[attributeType,attributeValue]…
spdAddTransport
NAME spdAddTransport – add a transport mode policy
SYNOPSIS
spdAddTransport=pConfStr
DESCRIPTION This rule adds a transport mode policy.
Rule Value: Rule Value = pConfStr
A stringValue specifier formatted as follows:
protocolSelector[/destinationPort/sourcePort],destinationAddressSelector,
sourceAddressSelector,directionality,useSelectors,keyManager,saProposalName
where:
- protocolSelector is a decValue IANA protocol number or ANY (6 for TCP or 17 for UDP).
- destinationPort is a decValue port number or ANY.
- sourcePort is a decValue port number or ANY.
- destinationAddressSelector is an address in the format:
ipAddress1[-ipAddress2 |/ipMaskPrefix].
- sourceAddressSelector is an address in the format:
ipAddress1[-ipAddress2 |/ipMaskPrefix].
Vista de pagina 136
1 2 ... 132 133 134 135 136 137 138 139 140 141 142 ... 159 160

Comentarios a estos manuales

Sin comentarios