. . . . .
V I R T U A L P R I V A T E N E T W O R K S
Advanced VPN Configuration Options
Version 3R2
Security Appliance User Guide
7-33
set ike p2-proposal {name_str} no-pfs preshare
{dh_group} {protocol} {encryption} {authentication}
{lifetime}
[NOTE]
Note: PFS must be enabled on both ends of a VPN configuration.
REPLAY PROTECTION
Replay protection allows the freeGuard Blaze 2100 to check the
sequence numbers of the VPN packets, to determine if the packet has
been received or not. If the packet does not fit into a specific number
sequence the packet will dropped. Replay protection will detect and
protect against man-in-the-middle attacks. Replay detection is enabled
by default on all IKE VPN tunnels.
To disable replay protection, use the
set vpn
command with the
no-
replay
option.
set vpn {name_str} gateway {gw_address} no-replay
VIEW A VPN TUNNEL
To view the current VPN tunnels use the
get vpn
command. You can
view all tunnels, specified by name, or type using the
auto
or
manual
options. Auto will show all tunnels using IKE, while manual will show all
Manual Key tunnels.
get vpn {name_str| auto| manual}
E X A M P L E : T O V I E W T H E V P N T U N N E L “ T O _ N E W Y O R K ”
get vpn to_newyork
G U I E X A M P L E : T O V I E W T H E V P N T U N N E L “ T O _ N E W Y O R K ”
1
VPN > IKE Settings
2
Select the following, then click
Apply
:
Edit (to_newyork)
V I E W I K E I N F O R M A T I O N
To view IKE information, l use the
get ike
command with the option to
view the gateways, p1-proposals, p2-proposals, cookies and id-modes.
