Home > Configuration > Ipsec > addipsecprofile

addipsecprofile

Use this method to add an ipsec profile.

Syntax



Parameters

name

The name of the ipsec profile.
This is mandatory parameter.

ikeversion

IKE Protocol Version

encalgo

Type of encryption algorithm (Note: Selection of AES enables AES128)

hashalgo

Type of hashing algorithm

lifetime

Lifetime of IKE SA in seconds. Lifetime of IPSec SA will be (lifetime of IKE SA/8)
Minimum value = 480.
Maximum value = 31536000.

psk

Pre shared key value

publickey

Public key file path

privatekey

Private key file path

peerpublickey

Peer public key file path

livenesscheckinterval

Number of seconds after which a notify payload is sent to check the liveliness of the peer. Additional retries are done as per retransmit interval setting. Zero value disables liveliness checks.
Minimum value = 0.
Maximum value = 64999.

replaywindowsize

IPSec Replay window size for the data traffic
Minimum value = 0.
Maximum value = 16384.

ikeretryinterval

IKE retry interval for bringing up the connection
Minimum value = 60.
Maximum value = 3600.

retransmissiontime

The interval in seconds to retry sending the IKE messages to peer, three consecutive attempts are done with doubled interval after every failure.
Minimum value = 1.
Maximum value = 99.

perfectforwardsecrecy

Enable/Disable PFS.

Return Value

Returns simpleResult

See Also