Tag Elements Beginning with P > <policy> (configuration/security/ike)

Usage

<configuration>
    <security>
        <ike>
            <policy>
                <name>name</name> <!-- identifier -->
                <mode>mode-choice</mode>
                <description>description</description>
                <proposals>...</proposals>
                <local-certificate>local-certificate</local-certificate>
                <local-key-pair>local-key-pair</local-key-pair>
                <encoding>encoding-choice</encoding>
                <identity>identity</identity>
                <pre-shared-key>...</pre-shared-key>
            </policy>
        </ike>
    </security>
</configuration>

Description

Define an IKE policy.

Contents

<description>—Text description of IKE policy.

<encoding>—Encoding to use for certificate or CRL on disk.

• binary—DER encoding.
• pem—Privacy-enhanced-mail encoding, base64.

<identity>—Define the remote certificate name.

<local-certificate>—File to read certificate from.

<local-key-pair>—File to read key-pair from.

<mode>—Define the IKE first phase mode.

• aggressive—Aggressive mode.
• main—Main mode.

<name>—IKE peer address.

<pre-shared-key>—Define a preshared key.

<proposals>—Define the set of IKE proposals.