NGFW Command Line Interface Reference 191
Example
NGFW{running-phase1-proposal-myphase1}auth local pre-shared-key remote
pre-shared-key
NGFW{running-phase1-proposal-myphase1}dh-group
ISAKMP Diffie-Hellman group.
Syntax
dh-group (1|2|5|14)
Example
NGFW{running-phase1-proposal-myphase1}dh-group 5
NGFW{running-phase1-proposal-myphase1}encryption
ISAKMP encryption algorithm.
Syntax
encryption (3des|aes128|aes192|aes256)
Example
NGFW{running-phase1-proposal-myphase1}encryption aes256
NGFW{running-phase1-proposal-myphase1}hash
ISAKMP hash algorithm.
Syntax
hash (md5|sha1)
Example
NGFW{running-phase1-proposal-myphase1}hash sha1
NGFW{running-phase1-proposal-myphase1}lifetime
ISAKMP security association lifetime. 86400 seconds commonly used in phase 1 is 24 hours.
Syntax
lifetime LIFE-DURATION LIFE-UNIT
lifetime (1-65535) (min|sec|hour)
Example
NGFW{running-phase1-proposal-myphase1}lifetime 24 hour
running-phase1-proposal-X Context Commands and their Usage
NGFW{running}vpn ipsec
NGFW{running-ipsec}phase2 2 proposal myphase2
NGFW{running-phase2-proposal-myphase2}auth2
IPsec authentication algorithm.
Comentários a estes Manuais