Lantronix SLC 8000 Series User Manual

6: Basic Parameters
SLC™ 8000 Advanced Console Manager User Guide 102
group 2
crypto isakmp policy 5
encr 3des
authentication pre-share
group 5
crypto isakmp policy 10
lifetime 120
crypto isakmp key cisco123 address 192.168.1.100
crypto ipsec transform-set ISR esp-3des esp-sha384-hmac
mode tunnel
crypto map CM 10 ipsec-isakmp
set peer 192.168.1.100
set transform-set ISR
set ikev2-profile IKEv2_Profile
match address VPN-TRAFFIC
crypto map IPSEC-SITE-TO-SITE 10 ipsec-isakmp
set peer 192.168.1.100
set transform-set ISR
set pfs group2
match address VPN-TRAFFIC
VPN Commands
Go to VPN Commands to view CLI commands which correspond to the web page entries
described above.
Security
The SLC 8000 advanced console manager supports a security mode that complies with the FIPS
140-2 standard. FIPS (Federal Information Processing Standard) 140-2 is a security standard
developed by the United States federal government that defines rules, regulations and standards
for the use of encryption and cryptographic services. The National Institute of Standards and
Technology (NIST) maintains the documents related to FIPS at:
http://csrc.nist.gov/publications/PubsFIPS.html
FIPS 140-2 defines four security levels, Level 1 through Level 4. The SLC unit uses a FIPS
module certified at Level 1.
Note: The SSH client keyboard-interactive authentication type is not supported while the
SLC unit is in FIPS mode. The SLC 8000 can support a limit of 25 concurrent CLI sessions
simultaneously when in FIPs mode.
To enable FIPS mode, the Network -> Security -> FIPS Mode flag needs to be enabled and the
SLC unit rebooted. Each time the SLC unit is booted in FIPS mode, it will perform a power up self
test to verify the integrity of the SLC unit's cryptographic module. If there are any issues with the

Lantronix SLC 8000 Series Specifications

General

Brand	Lantronix
Model	SLC 8000 Series
Category	Switch
Language	English