Configures parameters for IPsec tunnels on Fabric IPsec Gateway Virtual Machine (VM).
set ipsec <1-255> admin-state enable
set ipsec <1-255> auth-key WORD <1-32>
set ipsec <1-255> auth-method <psk | rsasig>
set ipsec <1-255> cert-subject <subject_label>
set ipsec <1-255> encryption-key-length <128 | 256>
set ipsec <1-255> fe-tunnel-dest-ip {A.B.C.D}
set ipsec <1-255> ipsec-dest-ip {A.B.C.D}
set ipsec <1-255> mtu <1300-9000>
set ipsec <1-255> responder-only <true | false>
set ipsec <1-255> tunnel-name WORD <1-64>
Enables IPsec on the specific IPsec tunnel.
Specifies the pre-shared authentication key.
Note
You must not use special characters ?, \, &, <, >, #.
Specifies the authentication type for IPsec tunnels. The default is pre-shared key (psk).
Specifies the certificate identity to use with the IPsec tunnel.
Specifies the encryption key length for the IPsec tunnel. The default encryption key length is 128 bit.
Specifies the destination IP address for Fabric Extend (FE) tunnel.
Specifies the destination IP address for IPsec tunnel.
Specifies the Maximum Transmission Unit (MTU) value for the FE tunnel with both IPsec and fragmentation and assembly capabilities.
Specifies if the IPsec session in the FE tunnel will be in responder only mode or initiator mode. When in responder mode the FE tunnel will only respond to the incoming request and not initiate the IPsec connection. By default both sides of IPSec connection will be initiators in the FE tunnel. Configure the IPsec tunnel to be in responder only mode when there is Network Address Translation (NAT) between the IPsec connection. For more information about NAT, see VOSS User Guide.
Specifies a name for the IPsec tunnel.
None.
Fabric IPsec Gateway Configuration
This command does not apply to all hardware platforms. For more information about feature support, see VOSS Feature Support Matrix.