Br5181>admin(network.wan.vpn)> set – Brocade Mobility 5181 Access Point Product Reference Guide (Supporting software release 4.4.0.0) User Manual

Page 244

Advertising
background image

230

Brocade Mobility 5181 Access Point Product Reference Guide

53-1002516-01

Network Commands

8

For information on configuring VPN using the applet (GUI), see

“Configuring VPN tunnels”

on

page 151.

BR5181>admin(network.wan.vpn)> set

Description

Sets VPN entry parameters.

Syntax

set type

<name> <tunnel type>

Sets the tunnel type <name> to Auto or Manual for the
specified tunnel name.

authalgo

<name> <authalgo>

Sets the authentication algorithm for <name> to (None,
MD5, or SHA1).

authkey

<name> <dir>

<authkey>

Sets the AH authentication key (if type is Manual) for
tunnel <name> with the direction set to IN or OUT, and
the manual authentication key set to <authkey>. (The
key size is 32 hex characters for MD5, and 40 hex
characters for SHA1).

esp-type

<name> <esptype>

Sets the Encapsulating Security Payload (ESP) type.
Options include None, ESP, or ESP-AUTH.

esp-enc
algo

<name> <escalgo>

Sets the ESP encryption algorithm. Options include
DES, 3DES, AES128, AES192, or AES256).

esp-enc
key

<name> <dir>

<enckey>

Sets the Manual Encryption Key in ASCII for tunnel
<name> and direction IN or OUT to the key <enc-key>.
The size of the key depends on the encryption
algorithm.
- 16 hex characters for DES
- 48 hex characters for 3DES
- 32 hex characters for AES128
- 48 hex characters for AES192
- 64 hex characters for AES256

esp-auth
algo

<name> <authalgo>

Sets the ESP authentication algorithm. Options include
MD5 or SHA1.

esp-auth
key

<name> <dir>

<authkey>

Sets ESP Authentication key <name> either for IN or
OUT direction to <auth-key>, an ASCII string of hex
characters. If authalgo is set to MD5, then provide 32
hex characters. If authalgo is set to SHA1, provide 40
hex characters.

spi

<name> <algo> <dir>

<value>

Sets 6 character IN(bound) or OUT(bound) for AUTH
(Manual Authentication) or ESP for <name> to <spi> (a
hex value more than 0xFF) <value>.

usepfs

<name> <mode>

Enables or disables Perfect Forward Secrecy for
<name>.

Advertising