InlineIPSecVpnIkeProfile1
Properties
Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
Possible values are: GROUP2 , GROUP5 , GROUP14 , GROUP15 , GROUP16 , GROUP19 , GROUP20 , GROUP21
Algorithm to be used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.
Possible values are: SHA1 , SHA2_256 , SHA2_384 , SHA2_512
Encryption algorithm is used during Internet Key Exchange(IKE) negotiation. Default is AES_128.
Possible values are: AES_128 , AES_256 , AES_GCM_128 , AES_GCM_192 , AES_GCM_256
IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.
Possible values are: IKE_V1 , IKE_V2 , IKE_FLEX
Life time for security association. Default is 86400 seconds (1 day).
JSON Example
{
"dh_groups": [
"GROUP2"
],
"digest_algorithms": [
"SHA1"
],
"encryption_algorithms": [
"AES_128"
],
"ike_version": "IKE_V1",
"sa_life_time": 0
}
Vendor Extensions
x-vmw-nsx-module: PolicyIPSecVpn
