Tag Elements Beginning with I > <ipsec-vpn> (configuration/services)

Usage

<configuration>
    <services>
        <ipsec-vpn>
            <rule>...</rule>
            <rule-set>...</rule-set>
            <ipsec>...</ipsec>
            <ike>...</ike>
            <traceoptions>...</traceoptions>
            <establish-tunnels>establish-tunnels-choice</establish-tunnels>
            <clear-ike-sas-on-pic-restart/>
            <clear-ipsec-sas-on-pic-restart/>
        </ipsec-vpn>
    </services>
</configuration>

Description

Configure IPSec VPN service.

Contents

<clear-ike-sas-on-pic-restart>—Clear IKE SAs when the corresponding PIC restarts.

<clear-ipsec-sas-on-pic-restart>—Clear IPSec SAs when the corresponding PIC restarts.

<establish-tunnels>—Define the criteria to establish tunnels.

• immediately—Establish tunnels immediately.
• on-traffic—Establish tunnels on traffic.

<ike>—IKE configuration.

<ipsec>—IPSec configuration.

<rule>—Define an IPSec rule.

<rule-set>—Defines a set of IPSec rules.

<traceoptions>—Trace options for IPSec key management process.