config phase1-interface

Description: Configures the VPN remote gateway.

Config ipsec

Config phase1-interface

Edit <name>

Set ike-version [1 | 2]

Set keylife [120 – 172800]

Set proposal [des-md5 | des-sha1 | des-sha256 | 3des-md5 | 3des-sha1 | 3des-sha256 | aes128-md5 | aes128-sha1 | aes128-sha256 | aes256-md5 | aes256-sha1 | aes256-sha256]

Set dhgrp [1 | 2 | 5 | 14]

Set *interface <name1>

Set type [static | ddns]

Set *remote-gw {ipv4-address}

Set *remotegw-ddns {string} *available when type is set to ddns

Set authmethod [psk | signature]

Set *psksecret {string}

Set localid {string}

Set peerid {string}

Set add-gw-route [enable | disable]

Set dev-id-notification [enable | disable]

Set dev-id <name1> *available when dev-id-notification is enabled

Unset

Next

Show

Abort

End

Delete <name>

Purge

Show

End

Sample command:

FX201E5919000057 (phase1-interface) # show
config vpn ipsec phase1-interface
    edit phase1_1
        set ike-version 2
        set keylife 86400
        set proposal aes128-sha256 aes256-sha256 3des-sha256 aes128-sha1 aes256-sha1 3des-sha1
        set dhgrp 14 5
        set interface wan
        set type static
        set remote-gw 207.102.148.196
        set authmethod psk
        set psksecret ******
        set localid 92
        set peerid 22
        set add-gw-route disable
        set dev-id-notification disable
    next
end