I got this code from xstop company for using the xstop with pm3.
Am I right that I only have to give my users a framed filter attribute
xstop.sec to get this thing working a little bit, Wating for an other
solution from emerald an xstop 8-)
-------------------------------
> >add filter xstop.sec
> >set filter xstop.sec 1 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 20
> >set filter xstop.sec 2 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 21
> >set filter xstop.sec 3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 80
> >set filter xstop.sec 4 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 119
> >add sa xstop
> >set sa xstop mode ipip-tunnel
> >set sa xstop peer-identifier [IP ADDRESS of R2000]
> >add sec-prof xstop
> >set sec-prof xstop 1 policy-filter xstop.sec
> >set sec-prof xstop 1 static-sa xstop
yours sincerely
sikko de graaf
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
S.K. de Graaf
IGR INTERNET your partner in Cyberspace
tel 010-5010505
fax 010-5014748
For more information about this list (including removal) go to:
http://www.iea-software.com/support/maillists/liststart