Compatible Systems INTRAPORT 2+ User Manual
Page 55
Chapter 6 - Basic Configuration Guide
49
If Manual is specified, this Tunnel Partner will not use IKE,
and the tunnel’s encryption and authentication parameters
must be manually set in the Manual Key Management dialog
box, which is not described here.
v Note: For more information regarding non-IKE encryption and
authentication, refer to the Text-Based Configuration and
Command Line Management Reference Guide.
If Initiate is specified, this Tunnel Partner will use IKE, but
will only initiate tunnel establishment attempts and will not
respond to them.
If Respond is specified, this Tunnel Partner will use IKE, but
will only respond to tunnel establishment attempts and will not
initiate them.
Transform-Sets the authentication and encryption algorithms to be
used for tunnel sessions. ESP(MD5,DES) is the default setting
and is recommended for most settings.
SharedKey-Sets a shared alphanumeric secret which is used to
generate session keys for authenticating and/or encrypting
each packet sent or received through the tunnel.
Dual Ethernet Setup Example
configure tunnel partner vpn 0
*[ Tunnel Partner VPN 0 ]# partner=10.10.5.3
*[ Tunnel Partner VPN 0 ]# bindto=ether 1
*[ Tunnel Partner VPN 0 ]# keymanage=auto
*[ Tunnel Partner VPN 0 ]# transform=esp(md5,des)
*[ Tunnel Partner VPN 0 ]# sharedkey=babaganoush
Single Ethernet Setup Example
configure tunnel partner vpn 0
*[ Tunnel Partner VPN 0 ]# partner=10.10.5.3
*[ Tunnel Partner VPN 0 ]# bindto=ether 0
*[ Tunnel Partner VPN 0 ]# keymanage=auto
*[ Tunnel Partner VPN 0 ]# transform=esp(md5,des)
*[ Tunnel Partner VPN 0 ]# sharedkey=babaganoush
3. Save the Configuration and download it to the device.
Use the save command to save the configuration and download it to the
device. When asked if you are sure that you want to download the
configuration and restart the device, reply yes. After the IntraPort has
rebooted, LAN-to-LAN tunnels can be established.
v Note: Do not turn the IntraPort 2/2+ off during the boot process or it
will lose its operating software.