Efficient Networks 107-0001-000 - Manual (Page 372)

Chapter 12: IKE/IPsec Commands Efficient Networks ® Router family
Command Line Interface Guide
Page 12-14 Efficient Networks
®
Parameters
Examples
Response
Command prompt.
ike ipsec policies set mode
Defines the mode filtering parameter value for the policy. The mode parameter
specifies the encapsulation mode (tunnel or transport) that may be used for the
connection (see “
Transport and Tunnel Encapsulation Modes” on page 5-50. ) If no
value is set for the mode parameter, tunnel mode is assumed.
Mgmt Class
Security (R/W)
Input Format
ike ipsec policies set mode <tunnel | transport> <policyname>
<interface>
a
a ASCII string
Interface that must be connected when the policy is used. This is
usually referenced by a remote name, although it could be another
interface such as “ethernet/0”. If no interface restriction is to be set
for this policy, specify the string
all .
<policyname> a Name of the IPsec policy to which the interface parameter value is
added.
b
b
To see the policy names, use the ike ipsec policies list command.
This command requires that, when the remote interface backup comes up, IKE is
enabled for packets described by policy corporate. The specified interface (back-
up) must be the interface to the IKE peer.
-> ike ipsec policies set interface backup corporate
This command specifies that IKE is enabled for packets described by policy my-
policy regardless of the interface the peer is on.
-> ike ipsec policies set interface all mypolicy