Ikesetprop - AMX NI-2000 Programming Manual

Appendix A: IPSec Configuration File

ikeSetProp

ikeSetProp
NAME
SYNOPSIS
DESCRIPTION This rule creates a Phase 1 proposal with previously defined Phase 1 transform names.
EXAMPLES
Config String
Format
Pre-defined
proposal
names
126
ikeSetProp – create a Phase 1 proposal
ikeSetProp=configString
Rule Value:
configString
A string formatted as follows:
proposalName,transformName,[transformName][,transformName]...
where
- proposalName is a unique name for a Phase 1 proposal.
- transformName is an existing Phase 1 transform name, defined via ikeSetXform.
ikeSetProp=mm_group2,mm_3des_sha,mm_3des_md5,mm_des_sha,mm_des_md5
proposalName,transformName,[transformName][,transformName]...
A transform consists of an encryption algorithm and a hash algorithm. The first value is the
encryption, the second the hash.
mm_3des_sha=3DES,SHA-1
mm_3des_sha2_256=3DES,SHA2-256
mm_3des_sha2_384=3DES,SHA2-384
mm_3des_sha2_512=3DES,SHA2-512
mm_3des_md5=3DES,MD5
mm_des_sha=DES,SHA-1
mm_des_sha2_256=DES,SHA2-256
mm_des_sha2_384=DES,SHA2-384
mm_des_sha2_512=DES,SHA2-512
mm_des_md5=DES,MD5
mm_aes_sha=AES,SHA-1
mm_aes_sha2_256=AES,SHA2-256
mm_aes_sha2_384=AES,SHA2-384
mm_aes_sha2_512=AES,SHA2-512
mm_aes_md5=AES,MD5
NI Series WebConsole & Programming Guide