Filter
Top Products
Other ADSL Commands
XSR CLI Reference Guide 13-91
Default
Disabledbydefault.Whenenabled,alloperationalparametersmustbespecified.
Example
Thefollowingexampleconfiguresasub‐interfacebackupwithaDialerIDof1,delayof20
secondsbeforeswitchingtothebackup,andadelayof10secondsbeforeswitchingbacktothe
ATMsub‐interface.Theexamplealsoconfiguresthesub‐interfacetoswitchtothebackuplineat
8:30P.M .thenswitchbacktothenormalinterfaceat9:50P.M .:
XSR(config-if<ATM0/1/0.1>)#backup interface Dialer1
XSR(config-if<ATM0/1/0.1>)#backup delay 20 10
XSR(config-if<ATM0/1/0.1>)#backup time-range 20:30 21:50
crypto
ThiscommandenablesandconfigurestheDF‐bitVPNparameteronthisATMsub‐interface.This
commandrequiresaproperlyconfiguredATMsub‐interface.
Syntax
crypto {ezipsec | ipsec df-bit {clear | copy | set}| map [map-name]}
Syntax of the “no” Form
Thiscommand’snodisablesthespecifiedDF‐bitsetting:
no crypto {ezipsec | ipsec df-bit}| map [map-name]}
Mode
ATMSub‐Interfaceconfiguration:XSR(config-if<ATMx/x/x.x>)#
Default
Disabled
Example
ThefollowingexampleenablesEZ‐IPSecwiththeoptionofhavingtheXSRlookintheoriginal
packetfortheouterDFbitsetting.Thisexamplealsoattachesthecryptomapets‐vpn:
ezipsec
EZ‐IPSecautomaticconfigurationenabled.
ipsec df-bit
IPSecenabledwiththefollowingDF‐bitoptions:
clear
TheouterIPheaderclearstheDFbitandtheXSRmayfragmentthepacket
toaddIPSecencapsulation.
copy
XSRsearchestheoriginalpacketfortheouterDF‐bitsetting.
set
TheouterIPheaderhastheDF‐bitset;but,theXSRmayfragmentthe
packetiftheoriginalpacketclearedtheDF‐bit.
map-name
Attachesacryptomaptotheinterfaceandname(optional).