Tag Elements Beginning with P > <proposal> (configuration/services/ipsec-vpn/ike)

Usage

<configuration>
    <services>
        <ipsec-vpn>
            <ike>
                <proposal>
                    <name>name</name> <!-- identifier -->
                    <description>description</description>
                    <authentication-method>authentication-method-choice
                                    </authentication-method>
                    <dh-group>dh-group-choice</dh-group>
                    <authentication-algorithm>authentication-algorithm-choice
                                    </authentication-algorithm>
                    <encryption-algorithm>encryption-algorithm-choice</encryption-algorithm>
                    <lifetime-seconds>seconds</lifetime-seconds>
                </proposal>
            </ike>
        </ipsec-vpn>
    </services>
</configuration>

Description

Define an IKE proposal.

Contents

<authentication-algorithm>—Define authentication algorithm.

• md5—MD5 authentication algorithm.
• sha-256—SHA 256-bit authentication algorithm.
• sha1—SHA1 authentication algorithm.

<authentication-method>—Define authentication method.

• dsa-signatures—DSA signatures.
• pre-shared-keys—Preshared keys.
• rsa-signatures—RSA signatures.

<description>—Text description of IKE proposal.

<dh-group>—Define Diffie-Hellman group.

• group1—Diffie-Hellman Group1.
• group2—Diffie-Hellman Group2.

<encryption-algorithm>—Define encryption algorithm.

• 3des-cbc—3DES-CBC encryption algorithm.
• aes-128-cbc—AES-CBC 128-bit encryption algorithm.
• aes-192-cbc—AES-CBC 192-bit encryption algorithm.
• aes-256-cbc—AES-CBC 256-bit encryption algorithm.
• des-cbc—DES-CBC encryption algorithm.

<lifetime-seconds>—Lifetime, in seconds.

<name>—Name of the IKE proposal.