Nortel 4134 用户指南
Configuring remote access IPsec policies
151
Table 75
Variable definitions
Variable definitions
Variable
Value
kilobytes <300-419430
3>
3>
Lifetime in kilobytes. Default: unlimited.
seconds <300-864000>
Lifetime in seconds. Default: 86400 seconds.
Configuring remote access IPsec policies
Creating an IPsec policy for remote access VPN
Create an IPsec policy for a remote access IPsec SA.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify configuration of dynamic IKE policies for remote access,
enter:
enter:
dynamic
4
To create a remote access IPsec policy, enter:
ipsec policy <name> {modecfg-group | l2tp-group}
—End—
Table 76
Variable definitions
Variable definitions
Variable
Value
group-type [modecfg-gr
oup | l2tp-group]
oup | l2tp-group]
modecfg-group: Mode config group. To configure
the mode config client parameters, use the
the mode config client parameters, use the
ike
policy client
commands.
l2tp-group: L2TP group. To configure the L2TP
server and client parameters, use the
server and client parameters, use the
l2tp-server
commands.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.