AudioCodes Mediant 2000 User Manual page 95

SIP User's Manual
Parameter Name
IKE SA LifeTime (sec)
[IKEPolicyLifeInSec]
IKE SA LifeTime (KB)
[IKEPolicyLifeInKB]
These lifetime parameters [IKE SA LifeTime (sec) and IKE SA LifeTime (KB)] determine the duration
the SA created in the main mode phase is valid. When the lifetime of the SA expires, it's automatically
renewed by performing the IKE first phase negotiations. To refrain from a situation where the SA
expires, a new SA is negotiated while the old one is still valid. As soon as the new SA is created, it
replaces the old one. This procedure occurs whenever an SA is about to expire.
First to Fourth Proposal Encryption
Type
[IKEPolicyProposalEncryption_X]
First to Fourth Proposal Authentication
Type
[IKEPolicyProposalAuthentication_X
]
First to Fourth Proposal DH Group
[IKEPolicyProposalDHGroup_X]
Version 5.8
Determines the time (in seconds) the SA negotiated in the
first IKE session (main mode) is valid. After the time
expires, the SA is re-negotiated.
The default value is 28800 (i.e., 8 hours).
Determines the lifetime (in kilobytes) that the SA negotiated
in the first IKE session (main mode) is valid. After this size
is reached, the SA is re-negotiated.
The default value is 0 (i.e., this parameter is ignored).
Determines the encryption type used in the main mode
negotiation for up to four proposals. For the
parameter, X depicts the proposal number (0 to 3).

[1] DES-CBC

[2] Triple DES-CBC

[3] AES-CBC

Not Defined (default)
Determines the authentication protocol used in the main
mode negotiation for up to four proposals. For the
parameter, X depicts the proposal number (0 to 3).

[2] HMAC-SHA1-96)

[4] HMAC-MD5-96

Not Defined (default)
Determines the length of the key created by the DH
protocol for up to four proposals. For the
X depicts the proposal number (0 to 3).

[0] DH-786-Bit

[1] DH-1024-Bit

Not Defined (default)
95
3. Web-Based Management
Description
ini file
ini file parameter,
October 2009
ini file