Westermo MR Series - Manual (Page 143)

143 6622-3201
Web Interface and Command Line Reference Guide www.westermo.com
Using Text Commands
From the command line, use the ike command to configure or display IKE responder settings. To
display current settings for the IKE responder enter the command:
ike ?
where is 0.
To change the value of a parameter use the command in the format:
ike 0
The parameters and values are:
Parameter Values Equivalent Web Parameter
deblevel 0,1,2,3,4 Debug level: 0=Off 1=Low 2=Med
3=High 4=Very High
debug off, on Use debug port
delmode 0,1,2,3 SA removal mode: 0=Normal
1=Remove IKE SA when last IPSec
SA removed 2=Remove IPSec SAs
when IKE SA removed 3=Both
inactto 0-255 Inactivity timeout
initialcontact off, on Send INITIAL-CONTACT notifica-
tions
keybits 0,128,192,256 Minimum Encryption key bits (AES
only)
ltime 1-28800 Duration
natkaint number NAT traversal keep-alive interval (s)
natt off, on NAT traversal enabled
noresp off, on Act as initiator only
privrsakey filename RSA private key file
rauthalgs md5, sha1 Acceptable authentication algo-
rithms
rdhmingroup 1,2,5 Minimum acceptable IPSec MODP
group
rencalgs des, 3des Acceptable encryption algorithms
respltime off, on Send RESPONDER-LIFETIME noti-
fications
rmdhaxgroup 1,2,5 Maximum acceptable IPSec MODP
group
Note:
Using ! for a parameter in a text command means blank.
For example, to set the Acceptable authentication algorithms to “MD5” only you would enter:
ike 0 rauthalgs md5