Nortel 4134 Guia Do Utilizador
Configuring IKE for site-to-site VPN
121
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify the IKE policy to configure, enter:
ike policy <policy-name> <peer-address>
4
To configure the IKE mode, enter:
[no] mode {aggressive | main}
—End—
Table 46
Variable definitions
Variable definitions
Variable
Value
main
Specifies use of full negotiation to establish a
security association. Main mode provides identity
protection.
security association. Main mode provides identity
protection.
aggressive
Specifies use of quick negotiation to establish a
security association. Aggressive mode does not
provide identity protection.
security association. Aggressive mode does not
provide identity protection.
[no]
Sets the mode to the default value (main mode).
Configuring the IKE exchange type
Configure the IKE exchange type to control whether the policy can initiate
negotiations, respond to negotiations, or both.
negotiations, respond to negotiations, or both.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify the IKE policy to configure, enter:
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.