Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

[edit security ike] Hierarchy Level

security {ike {gateway gateway-name {address [ addresses-or-hostnames ];dead-peer-detection {always-send;interval seconds;threshold number;}dynamic {connections-limit number;distinguished-name {container container-name;wildcard wildcard;}hostname hostname;ike-user-type (group-ike-id | shared-ike-id);inet ipv4-address;user-at-hostname "email-address";}external-interface interface-name;ike-policy policy-name;local-identity (distinguished-name | hostname hostname | inet ipv4-address | user-at-hostname "email-address");nat-keepalive seconds;no-nat-traversal;xauth access-profile profile-name;}policy (address | policy-name) {certificate {local-certificate certificate-identifier;peer-certificate-type (pkcs7 | x509-signature);trusted-ca (ca-index | use-all);}description text-description;encoding (binary | pem);identity identity-name;local-certificate certificate-filename;local-key-pair private-public-key-file;mode (aggressive | main);pre-shared-key (ascii-text key | hexadecimal key);proposal-set (basic | compatible | standard);proposals [ proposal-names ];}proposal ike-proposal-name {authentication-algorithm (md5 | sha1 | sha-256);authentication-method (dsa-signatures | pre-shared-keys | rsa-signatures);description text-description;dh-group (group1 | group2 | group5);encryption-algorithm (3des-cbc | aes-128-cbc | aes-192-cbc | aes-256-cbc | des-cbc);lifetime-seconds seconds;}respond-bad-spi number;traceoptions {file <filename> <files number> <match regular-expression> <size maximum-file-size> <world-readable | no-world-readable>;flag flag;no-remote-trace;}}}
 

Related Documentation

 

Published: 2013-07-31

Previous Page Next Page