InlineIPSecVpnIkeProfile

Description not available

Properties

array of string
dh_groups Optional

Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.

Possible values are: GROUP2GROUP5GROUP14GROUP15GROUP16GROUP19GROUP20GROUP21


array of string
digest_algorithms Optional

Algorithm to be used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.

Possible values are: SHA1SHA2_256SHA2_384SHA2_512


array of string
encryption_algorithms Optional

Encryption algorithm is used during Internet Key Exchange(IKE) negotiation. Default is AES_128.

Possible values are: AES_128AES_256AES_GCM_128AES_GCM_192AES_GCM_256


string
ike_version Optional

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.

Possible values are: IKE_V1IKE_V2IKE_FLEX


integer as int64
sa_life_time Optional

Life time for security association. Default is 86400 seconds (1 day).

JSON Example

{
	"dh_groups": [
		"GROUP2"
	],
	"digest_algorithms": [
		"SHA1"
	],
	"encryption_algorithms": [
		"AES_128"
	],
	"ike_version": "IKE_V1",
	"sa_life_time": 0
}

Vendor Extensions

This class contains the following vendor extensions defined in the spec:
x-vmw-nsx-module: PolicyIPSecVpn

Feedback

Was this page helpful?