Enterasys Networks X-Pedition XSR CLI - Manual (Page 517)

Other ADSL Commands
XSR CLI Reference Guide 13-91
Default
Disabled by default. When enabled, all operational parameters must be specified.
Example
The following example configures a sub‐interface backup with a Dialer ID of 1, delay of 20
seconds before switching to the backup, and a delay of 10 seconds before switching back to the
ATM sub‐interface. The example also configures the sub‐interface to switch to the backup line at
8:30 P.M. then switch back to the normal interface at 9:50 P.M. :
XSR(config-if)#backup interface Dialer1
XSR(config-if)#backup delay 20 10
XSR(config-if)#backup time-range 20:30 21:50
crypto
This command enables and configures the DF‐bit VPN parameter on this ATM sub‐interface. This
command requires a properly configured ATM sub‐interface.
Syntax
crypto {ezipsec | ipsec df-bit {clear | copy | set}| map [map-name]}
Syntax of the “no” Form
This command’s no disables the specified DF‐bit setting:
no crypto {ezipsec | ipsec df-bit}| map [map-name]}
Mode
ATM Sub‐Interface configuration: XSR(config-ifx/x/x.x>)#
Default
Disabled
Example
The following example enables EZ‐IPSec with the option of having the XSR look in the original
packet for the outer DF bit setting. This example also attaches the crypto map ets‐vpn:
ezipsec EZ‐IPSec automatic configuration enabled.
ipsec df-bit IPSec enabled with the following DF‐bit options:
clear The outer IP header clears the DF bit and the XSR may fragment the packet
to add IPSec encapsulation.
copy XSR searches the original packet for the outer DF‐bit setting.
set The outer IP header has the DF‐bit set; but, the XSR may fragment the
packet if the original packet cleared the DF‐bit.
map-name Attaches a crypto map to the interface and name (optional).