Westermo MR Series - Manual (Page 140)

140 6622-3201
Web Interface and Command Line Reference Guide www.westermo.com
Use debug port:
When this parameter is set to “No”, any debug information is sent to the normal analyser trace.
When set to “Yes”, debug information is sent to the debug port, i.e. the port specified in the
debug command used at the command line.
Debug level:
This parameter is used to control the amount of information contained in debug traces. It can
be set to “Off”, “Low”, “Med”, “High” or “Very High”. Setting the parameter to “Off” disables
debug tracing.
Using Text Commands
From the command line, use the ike command to configure or display IKE initiator settings. To dis-
play current settings for an IKE instance enter the command:
ike ?
where is 0 or 1.
To change the value of a parameter use the command in the format:
ike
The parameters and values are:
Parameter Values Equivalent Web Parameter
aggressive off, on Aggressive mode
authalg md5, sha1 Authentication algorithm
deblevel 0,1,2,3 Debug level: 0=Off 1=Low 2=Med
3=High 4=Very High
debug off, on Use debug port
delmode 0,1,2,3 SA removal mode: 0=Normal
1=Remove IKE SA when last IPSec
SA removed 2=Remove IPSec SAs
when IKE SA removed 3=Both
dpd off, on Dead Peer Detection
encalg des, 3des Encryption algorithm
ikegroup 1,2,5,! IKE MODP group
keybits 0,128,192,256 Encryption key bits (AES only)
inactto 0-255 Inactivity timeout
initialcontact off, on Send INITIAL-CONTACT notifica-
tions
ipsecgroup 0,1,2,5,! Minimum IPSec MODP group
ltime 1-28800 Duration
natkaint number NAT traversal keep-alive interval
natt off, on NAT traversal enabled
privrsakey filename RSA private key file
retran 0-9 Maximum re-transmits
retranint 0-255 Re-transmit interval
Note:
Using ! for a parameter in a text command means blank.
For example, to turn aggressive mode on you would enter:
ike 0 aggressive on