Developer Documentation
ADC CLI Commands
Current Release 13.1 13.0 12.1

ipsec-parameter

May 28, 2024
Contributed by: 
C

The following operations can be performed on “ipsec-parameter”:

unset set show

unset ipsec parameter

Set global parameters for IPSEC.Refer to the set ipsec parameter command for meanings of the arguments.

Synopsis

unset ipsec parameter [-ikeVersion] [-encAlgo] [-hashAlgo] [-lifetime] [-livenessCheckInterval] [-replayWindowSize] [-ikeRetryInterval] [-perfectForwardSecrecy] [-retransmissiontime]

set ipsec parameter

Set global parameters for IPSEC

Synopsis

set ipsec parameter [-ikeVersion ( V1 V2 )] [-encAlgo ...] \[-hashAlgo ...] \[-lifetime <positive\_integer>] \[-livenessCheckInterval <positive\_integer>] \[-replayWindowSize <positive\_integer>] \[-ikeRetryInterval <positive\_integer>] \[-perfectForwardSecrecy \( ENABLE DISABLE )] [-retransmissiontime ]

Arguments

ikeVersion IKE Protocol Version

Possible values: V1, V2 Default value: V2

encAlgo Type of encryption algorithm (Note: Selection of AES enables AES128) Default value: AES

hashAlgo Type of hashing algorithm Default value: HMAC_SHA256

lifetime Lifetime of IKE SA in seconds. Lifetime of IPSec SA will be (lifetime of IKE SA/8) Minimum value: 480 Maximum value: 31536000

livenessCheckInterval Number of seconds after which a notify payload is sent to check the liveliness of the peer. Additional retries are done as per retransmit interval setting. Zero value disables liveliness checks. Minimum value: 0 Maximum value: 64999

replayWindowSize IPSec Replay window size for the data traffic Minimum value: 0 Maximum value: 16384

ikeRetryInterval IKE retry interval for bringing up the connection Minimum value: 60 Maximum value: 3600

perfectForwardSecrecy Enable/Disable PFS.

Possible values: ENABLE, DISABLE Default value: DISABLE

retransmissiontime The interval in seconds to retry sending the IKE messages to peer, three consecutive attempts are done with doubled interval after every failure, increases for every retransmit till 6 retransmits. Minimum value: 1 Maximum value: 99

show ipsec parameter

Show global parameters for IPSEC

Synopsis

show ipsec parameter

Arguments

Output

ikeVersion IKE Protocol Version

encAlgo Type of encryption algorithm (Note: Selection of AES enables AES128)

hashAlgo Type of hashing algorithm

lifetime Lifetime of IKE SA in seconds. Lifetime of IPSec SA will be (lifetime of IKE SA/8)

livenessCheckInterval Number of seconds after which a notify payload is sent to check the liveliness of the peer. Additional retries are done as per retransmit interval setting. Zero value disables liveliness checks.

replayWindowSize IPSec Replay window size for the data traffic

ikeRetryInterval IKE retry interval for bringing up the connection

perfectForwardSecrecy Enable/Disable PFS.

responderOnly Responder Only config for IKED.

retransmissiontime The interval in seconds to retry sending the IKE messages to peer, three consecutive attempts are done with doubled interval after every failure, increases for every retransmit till 6 retransmits.

ipsec-parameter
May 28, 2024
Contributed by: 
C
May 28, 2024
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.