Nortel 4134 Guia Do Utilizador
Configuring IPsec for site-to-site VPN
135
Table 60
Variable definitions
Variable definitions
Variable
Value
md5-hmac
A 128-bit message digest-RFC 1321 + RFC 2085
sha1-hmac
Secure Hash Standard: A 160-bit message
digest-NIST,FIPS PUB 180-1
digest-NIST,FIPS PUB 180-1
null
no authentication
Configuring lifetime for IPsec proposal
Configure the lifetime of the IPsec SA. When the SA expires, it is replaced
by a new negotiated SA or terminated.
by a new negotiated SA or terminated.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-address>
4
To select the IPsec proposal to configure, enter:
proposal <1-5>
5
To configure lifetime, enter:
lifetime {kilobytes <300-4194303> | seconds
<300-864000>}
—End—
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.