ZyXEL Communications n/a User Manual

Chapter 14 IPSec Commands

DSL & IAD CLI Reference Guide

ipsec dial <rule-number>

Dials the specified IPSec policy manually.

ipsec display <rule-number>

Displays the specified IPSec rule. Use ipsec load to 
load an IPSec rule before using this command.

ipsec load <rule-number>

Loads the specified IPSec rule for editing.

ipsec save

Saves the IPSec rule settings.

ipsec config netbios active <on|off>

Sets whether or not NetBIOS packets are allowed to pass 
through VPN tunnels.

ipsec config name <name>

Sets the rule’s name (up to 32 characters). 

ipsec config active <Yes|No>

Turns the rule on or off.

ipsec config natTraversal <Yes|No>

Turns NAT traversal on or off.

ipsec config keepAlive <Yes|No>

Turns keep alive on or off.

ipsec config lcIdType <0:IP|1:DNS | 

2:Email>

Sets the local ID type.

ipsec config lcIdContent <content>

Sets the local ID content with the specified IP address, 
domain name, or e-mail address. Use up to 31 characters. 

ipsec config myIpAddr <ip-address>

Sets the local VPN gateway with the specified IP address.

ipsec config peerIdType 

<0:IP|1:DNS|2:Email>

Sets the peer ID type.

ipsec config peerIdContent <content>

Sets the peer ID content with the specified IP address, 
domain name, or e-mail address. Use up to 31 characters. 

ipsec config secureGwAddr <ip-

address|domain-name>

Sets the remote gateway address with the specified IP 
address or domain name.

ipsec config protocol <1:ICMP 

|6:TCP|17:UDP>

Sets the traffic protocol that can trigger the VPN tunnel 
and be forwarded through it.

ipsec config lcAddrType 

<0:single|1:range|2:subnet>

Sets the address type for the local network.

ipsec config lcAddrStart <ip-address>

Sets the local network starting IP address.

ipsec config lcAddrEndMask <ip-address>

Sets the local network ending IP address for a range or 
the subnet mask for a subnet.

ipsec config lcPortStart <port>

Sets the starting port for local network traffic. Only traffic 
using the specified ports can go through the VPN tunnel.

ipsec config lcPortEnd <port>

Sets the ending port for local network traffic. 

ipsec config dynamicLocal <On|Off>

Sets the local network IP address range to be dynamic 
(any).

ipsec config rmAddrType 

<0:single|1:range|2:subnet>

Sets the address type for the remote network.

ipsec config rmAddrStart <ip-address>

Sets the remote network starting IP address.

ipsec config rmAddrEndMask <ip-address>

Sets the remote network ending IP address for a range or 
the subnet mask for a subnet.

ipsec config rmPortStart <port>

Sets the starting port for remote network traffic. Only traffic 
using the specified ports can go through the VPN tunnel.

ipsec config rmPortEnd <port>

Sets the ending port for remote network traffic. 

ipsec config dynamicRemote <On|Off>

Sets the remote network IP address range to be dynamic 
(any).

Table 34   IPSec Commands (continued)