# Script (10.50.0091 / 04.05.2021) (0x0420021c,IDs:2,3,4,9,f/X/e45d5400,15,1a,23//f2099280,2b,30//f2311f80;0x00000403) lang English flash No # default value cd /Setup/VPN/Proposals/IPSEC-Proposal-Lists # IPSEC-Proposal-Lists IPSEC-Proposal-1 IPSEC-Proposal-2 IPSEC-Proposal-3 IPSEC-Proposal-4 IPSEC-Proposal-5 IPSEC-Proposal-6 IPSEC-Proposal-7 IPSEC-Proposal-8 # =======================------------------------------------------------------------------------------------------------------------------------------------------------------ add "ESP_TN" {IPSEC-Proposal-1} "TN-AES256-SHA256" {IPSEC-Proposal-2} "TN-AES256-SHA1" {IPSEC-Proposal-3} "TN-AES128-SHA256" {IPSEC-Proposal-4} "TN-AES128-SHA1" {IPSEC-Proposal-5} "" {IPSEC-Proposal-6} "" {IPSEC-Proposal-7} "" {IPSEC-Proposal-8} "" cd / # default value cd /Setup/VPN/Proposals/IKE-Proposal-Lists # IKE-Proposal-Lists IKE-Proposal-1 IKE-Proposal-2 IKE-Proposal-3 IKE-Proposal-4 IKE-Proposal-5 IKE-Proposal-6 IKE-Proposal-7 IKE-Proposal-8 # =====================------------------------------------------------------------------------------------------------------------------------------------------------------ add "IKE_PRESH_KEY" {IKE-Proposal-1} "PSK-AES256-SHA256" {IKE-Proposal-2} "PSK-AES256-SHA1" {IKE-Proposal-3} "PSK-AES128-SHA256" {IKE-Proposal-4} "PSK-AES128-SHA1" {IKE-Proposal-5} "" {IKE-Proposal-6} "" {IKE-Proposal-7} "" {IKE-Proposal-8} "" add "IKE_RSA_SIG" {IKE-Proposal-1} "RSA-AES256-SHA256" {IKE-Proposal-2} "RSA-AES256-SHA1" {IKE-Proposal-3} "RSA-AES128-SHA256" {IKE-Proposal-4} "RSA-AES128-SHA1" {IKE-Proposal-5} "" {IKE-Proposal-6} "" {IKE-Proposal-7} "" {IKE-Proposal-8} "" cd / # default value cd /Setup/VPN/Proposals/IPSEC # Name ESP-Crypt-Alg ESP-Crypt-Keylen ESP-Auth-Alg Lifetime-Sec Lifetime-KB # ===================---------------------------------------------------------------------------------------- add "TN-AES256-SHA256" {ESP-Crypt-Alg} AES-CBC {ESP-Crypt-Keylen} 256 {ESP-Auth-Alg} HMAC-SHA-256 {Lifetime-Sec} 28800 {Lifetime-KB} 2000000 add "TN-AES256-SHA1" {ESP-Crypt-Alg} AES-CBC {ESP-Crypt-Keylen} 256 {ESP-Auth-Alg} HMAC-SHA1 {Lifetime-Sec} 28800 {Lifetime-KB} 2000000 add "TN-AES128-SHA256" {ESP-Crypt-Alg} AES-CBC {ESP-Crypt-Keylen} 128 {ESP-Auth-Alg} HMAC-SHA-256 {Lifetime-Sec} 28800 {Lifetime-KB} 2000000 add "TN-AES128-SHA1" {ESP-Crypt-Alg} AES-CBC {ESP-Crypt-Keylen} 128 {ESP-Auth-Alg} HMAC-SHA1 {Lifetime-Sec} 28800 {Lifetime-KB} 2000000 cd / # default value cd /Setup/VPN/Proposals/IKE # Name IKE-Crypt-Alg IKE-Crypt-Keylen IKE-Auth-Alg IKE-Auth-Mode Lifetime-Sec Lifetime-KB # ===================---------------------------------------------------------------------------------------------------------- add "PSK-AES256-SHA256" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 256 {IKE-Auth-Alg} SHA-256 {IKE-Auth-Mode} Preshared-Key {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "PSK-AES256-SHA1" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 256 {IKE-Auth-Alg} SHA1 {IKE-Auth-Mode} Preshared-Key {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "PSK-AES128-SHA256" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 128 {IKE-Auth-Alg} SHA-256 {IKE-Auth-Mode} Preshared-Key {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "PSK-AES128-SHA1" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 128 {IKE-Auth-Alg} SHA1 {IKE-Auth-Mode} Preshared-Key {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "RSA-AES256-SHA256" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 256 {IKE-Auth-Alg} SHA-256 {IKE-Auth-Mode} RSA-Signature {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "RSA-AES256-SHA1" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 256 {IKE-Auth-Alg} SHA1 {IKE-Auth-Mode} RSA-Signature {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "RSA-AES128-SHA256" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 128 {IKE-Auth-Alg} SHA-256 {IKE-Auth-Mode} RSA-Signature {Lifetime-Sec} 108000 {Lifetime-KB} 0 add "RSA-AES128-SHA1" {IKE-Crypt-Alg} AES-CBC {IKE-Crypt-Keylen} 128 {IKE-Auth-Alg} SHA1 {IKE-Auth-Mode} RSA-Signature {Lifetime-Sec} 108000 {Lifetime-KB} 0 cd / # default value set /Setup/VPN/MainMode-Proposal-List-Default "IKE_RSA_SIG" # default value set /Setup/VPN/MainMode-IKE-Group-Default 2 # default value set /Setup/VPN/AggrMode-Proposal-List-Default "IKE_PRESH_KEY" # default value set /Setup/VPN/AggrMode-IKE-Group-Default 2 # default value set /Setup/VPN/QuickMode-Proposal-List-Default "ESP_TN" # default value set /Setup/VPN/QuickMode-PFS-Group-Default 2 # default value set /Setup/VPN/QuickMode-Shorthold-Time-Default 0 flash Yes # done exit