| Attributes |
ConnectionType
restricted |
-
connectionType
=
BOTH
-
Connection type of the IKEv1 session.
|
ManagedObject[0..1]
restricted |
-
credential
-
Reference to the managed element own credential to be used in IKEv1 negotiation.
Valid reference is NodeCredential in Certificate Management Branch.
If credential and trustCategory are not specified, then preshared key-based authentication is selected. The referring Ikev1Session instances must have preshared keys installed.
|
Evip_Ipsec_Ikev1_Ikev1PolicyProfile_dpdKeepAliveInterval
restricted |
-
dpdKeepAliveInterval
=
30
-
dpdKeepAliveInterval defines the time interval between R_U_THERE messages sent to the IKE peer.
|
Evip_Ipsec_Ikev1_Ikev1PolicyProfile_dpdTime
restricted |
-
dpdTime
=
150
-
Time to detect an IKE SA is down.
If the SA is down, an attempt is made to re-establish the SA.
If this attempt fails, an alarm is issued.
|
Identity[0..1]
restricted |
-
identityLocal
-
Local identity.
If the local identity is not configured, it is automatically configured in the system as follows:
a) In case of certificate based authentication, the local identity is set to the same value as specified by the subject alt name in the certificate that the node use.
b) In case of preshared key-based authentication, the local identity is set to the local IP address of the tunnel.
|
string
key
mandatory
noNotification
restricted |
-
ikev1PolicyProfileId
-
Value component of the RDN.
|
Ikev1Proposal[1..] nonUnique ordered
mandatory
restricted |
-
ikev1Proposal
-
Ordered list of IKE transforms (proposals) to be used for IKE SA negotiation.
At least one IKE transform must be specified. The first one in the list has the highest priority.
|
Evip_Ipsec_Ikev1_Ikev1PolicyProfile_phase1SaLifetime
restricted |
-
phase1SaLifetime
=
180
-
Lifetime for Phase 1 SA.
|
ManagedObject[0..1]
restricted |
-
trustCategory
-
Reference to a trusted certificates group.
Valid reference is TrustCategory in Certificate Management Branch.
If credential and trustCategory are not specified, then pre-shared key based authentication is selected. The referring Ikev1Session instances have to have pre-shared keys installed.
|
string[0..1]
restricted |
-
userLabel
-
Label for free use.
|