AMX NI-2100/3100/4100 - Manual (Page 132)

Appendix A: IPSec Configuration File
124 NI Series WebConsole & Programming Guide
SpdSetProp
SpdSetProp
NAME spdSetProp– add Phase 2 transforms to a Phase 2 proposal
SYNOPSIS
spdSetProp=pConfStr
DESCRIPTION This rule adds one or more existing Phase 2 transforms to a Phase 2 proposal.
Rule Value:
pConfStr
A stringValue specifier formatted as follows:
proposalName,transformName[,transformName...]
where
- proposalName is a unique Phase 2 proposal name.
- transformName is the name of an existing Phase 2 transform. You can specify up to eight
transform names.
EXAMPLES spdSetProp=proposal_foo,ah_xform
Config String
Format
proposalName,transformName,[,transformName…]
Pre-defined
proposal
names The following are Phase II proposal names already defined inside the AMX Firmware and
available for use.
ah_g1_transport=ah_sha,ah_md5
Attributes:
DHGROUP=G1,
ENCAP=TRANSPORT
HARDLIFETIME=1800
SOFTLIFETIME=1500
ah_g2_transport=ah_sha,ah_md5
Attributes:
DHGROUP=G2
ENCAP=TRANSPORT
HARDLIFETIME=1800
SOFTLIFETIME=1500
ah_g1_tunnel=ah_sha,ah_md5
Attributes:
DHGROUP=G1
ENCAP=TUNNEL
HARDLIFETIME=1800
SOFTLIFETIME,1500
ah_g2_tunnel=ah_sha,ah_md5
Attributes:
DHGROUP=G2
ENCAP=TUNNEL
HARDLIFETIME=1800
SOFTLIFETIME=1500