Nortel 4134 用户指南
Configuring remote access IKE policies
141
mode {main | aggressive}
—End—
Table 66
Variable definitions
Variable definitions
Variable
Value
main
Specifies use of full negotiation to establish a
security association. Main mode provides identity
protection.
security association. Main mode provides identity
protection.
aggressive
Specifies use of quick negotiation to establish a
security association. Aggressive mode does not
provide identity protection. (This is the default
mode.)
security association. Aggressive mode does not
provide identity protection. (This is the default
mode.)
Configuring mode-config client parameters for remote access
VPN
VPN
Configure the parameters for mode-config.
Configuring address pool for mode config
Configure the address pool
for mode config.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify configuration of remote access IKE policies, enter:
dynamic
4
To specify the remote access IKE policy to configure, enter:
ike policy <policy-name> modecfg-group
5
To specify client configuration, enter:
client configuration
6
To configure the mode-config address pool, enter:
address-pool <1-3> <start-ip> <end-ip>
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.