config vpn ipsec manualkey-interface
Configure IPsec manual keys.
config vpn ipsec manualkey-interface
Description: Configure IPsec manual keys.
edit <name>
set interface {string}
set ip-version [4|6]
set addr-type [4|6]
set remote-gw {ipv4-address}
set remote-gw6 {ipv6-address}
set local-gw {ipv4-address-any}
set local-gw6 {ipv6-address}
set auth-alg [null|md5|...]
set enc-alg [null|des|...]
set auth-key {user}
set enc-key {user}
set local-spi {user}
set remote-spi {user}
set npu-offload [enable|disable]
next
end
config vpn ipsec manualkey-interface
|
Parameter |
Description |
Type |
Size |
|||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
interface |
Name of the physical, aggregate, or VLAN interface. |
string |
Maximum length: 15 |
|||||||||||||||
|
ip-version |
IP version to use for VPN interface. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
addr-type |
IP version to use for IP packets. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
remote-gw |
IPv4 address of the remote gateway's external interface. |
ipv4-address |
Not Specified |
|||||||||||||||
|
remote-gw6 |
Remote IPv6 address of VPN gateway. |
ipv6-address |
Not Specified |
|||||||||||||||
|
local-gw |
IPv4 address of the local gateway's external interface. |
ipv4-address-any |
Not Specified |
|||||||||||||||
|
local-gw6 |
Local IPv6 address of VPN gateway. |
ipv6-address |
Not Specified |
|||||||||||||||
|
auth-alg |
Authentication algorithm. Must be the same for both ends of the tunnel. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
enc-alg |
Encryption algorithm. Must be the same for both ends of the tunnel. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
|
auth-key |
Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens. |
user |
Not Specified |
|||||||||||||||
|
enc-key |
Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens. |
user |
Not Specified |
|||||||||||||||
|
local-spi |
Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules. |
user |
Not Specified |
|||||||||||||||
|
remote-spi |
Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules. |
user |
Not Specified |
|||||||||||||||
|
npu-offload * |
Enable/disable offloading IPsec VPN manual key sessions to NPUs. |
option |
- |
|||||||||||||||
|
|
|
|||||||||||||||||
* This parameter may not exist in some models.