ADC CLI Commands

ipsec-profile

June 28, 2023

Contributed by:

The following operations can be performed on “ipsec-profile”:

show

add

rm ipsec profile

Remove an ipsec peer

Synopsis

rm ipsec profile

Arguments

name The name of the ipsec profile.

Example

rm ipsec profile

show ipsec profile

Display all of the configured ipsec peers

Synopsis

show ipsec profile []

Arguments

name The name of the ipsec profile

Output

ikeVersion IKE Protocol Version

encAlgo Type of encryption algorithm.

hashAlgo Type of hashing algorithm

lifetime Lifetime of IKE SA in seconds. Lifetime of IPSec SA will be (lifetime of IKE SA/8)

livenessCheckInterval Number of seconds after which a notify payload is sent to check the liveliness of the peer. Additional retries are done as per retransmit interval setting. Zero value disables liveliness checks.

replayWindowSize IPSec Replay window size for the data traffic

retransmissiontime The interval in seconds to retry sending the IKE messages to peer, three consecutive attempts are done with doubled interval after every failure.

psk Pre shared key value

publickey Public key file path

privatekey Private key file path

peerPublicKey Peer public key file path

ikeRetryInterval IKE retry interval for bringing up the connection

perfectForwardSecrecy Enable/Disable PFS.

responderOnly Responder Only config for IKED.

builtin Indicates that a variable is a built-in (SYSTEM INTERNAL) type.

devno count stateflag

Example

show ipsec profile

add ipsec profile

Add an ipsec profile.

Synopsis

add ipsec profile \[-ikeVersion \( V1 | V2 )] \[-encAlgo ...] \[-hashAlgo ...] \[-lifetime <positive\_integer>] \(-psk | \(-publickey -privatekey -peerPublicKey )) \[-livenessCheckInterval <positive\_integer>] \[-replayWindowSize <positive\_integer>] \[-ikeRetryInterval <positive\_integer>] \[-retransmissiontime <positive\_integer>] \[-perfectForwardSecrecy \( ENABLE | DISABLE )]

Arguments

name The name of the ipsec profile

ikeVersion IKE Protocol Version

Possible values: V1, V2

encAlgo Type of encryption algorithm (Note: Selection of AES enables AES128)

hashAlgo Type of hashing algorithm

lifetime Lifetime of IKE SA in seconds. Lifetime of IPSec SA will be (lifetime of IKE SA/8) Minimum value: 480 Maximum value: 31536000

psk Pre shared key value

publickey Public key file path

privatekey Private key file path

peerPublicKey Peer public key file path

replayWindowSize IPSec Replay window size for the data traffic Minimum value: 0 Maximum value: 16384

ikeRetryInterval IKE retry interval for bringing up the connection Minimum value: 60 Maximum value: 3600

retransmissiontime The interval in seconds to retry sending the IKE messages to peer, three consecutive attempts are done with doubled interval after every failure. Minimum value: 1 Maximum value: 99

perfectForwardSecrecy Enable/Disable PFS.

Possible values: ENABLE, DISABLE

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

ipsec-profile

June 28, 2023

Contributed by:

June 28, 2023

Contributed by:

ipsec-profile

rm ipsec profile

Synopsis

Arguments

Example

show ipsec profile

Synopsis

Arguments

Output

Example

add ipsec profile

Synopsis

Arguments

In this article