Project

General

Profile

Regression #11442 ยป ipsec-config-11442.xml

Jim Pingle, 03/11/2021 03:25 PM

 
1

    
2
<ipsec>
3
	<vtimaps></vtimaps>
4
	<phase1>
5
		<ikeid>1</ikeid>
6
		<iketype>ikev2</iketype>
7
		<interface>wan</interface>
8
		<remote-gateway>198.51.100.99</remote-gateway>
9
		<protocol>inet</protocol>
10
		<myid_type>myaddress</myid_type>
11
		<myid_data></myid_data>
12
		<peerid_type>fqdn</peerid_type>
13
		<peerid_data>host.example.com</peerid_data>
14
		<encryption>
15
			<item>
16
				<encryption-algorithm>
17
					<name>aes128gcm</name>
18
					<keylen>128</keylen>
19
				</encryption-algorithm>
20
				<hash-algorithm>aesxcbc</hash-algorithm>
21
				<prf-algorithm>md5</prf-algorithm>
22
				<dhgroup>32</dhgroup>
23
			</item>
24
		</encryption>
25
		<lifetime>28800</lifetime>
26
		<rekey_time></rekey_time>
27
		<reauth_time>25920</reauth_time>
28
		<rand_time></rand_time>
29
		<pre-shared-key>e0748f9a0cf080b5118cccb370eea01c72f3c9b85e1e3a2445df10c7</pre-shared-key>
30
		<private-key></private-key>
31
		<certref></certref>
32
		<pkcs11certref></pkcs11certref>
33
		<pkcs11pin></pkcs11pin>
34
		<caref></caref>
35
		<authentication_method>pre_shared_key</authentication_method>
36
		<descr><![CDATA[Expanded IKE Numbering Test]]></descr>
37
		<nat_traversal>on</nat_traversal>
38
		<mobike>off</mobike>
39
		<closeaction></closeaction>
40
		<dpd_delay>10</dpd_delay>
41
		<dpd_maxfail>5</dpd_maxfail>
42
		<splitconn></splitconn>
43
	</phase1>
44
	<phase2>
45
		<ikeid>1</ikeid>
46
		<uniqid>587193b80af8e</uniqid>
47
		<mode>tunnel</mode>
48
		<reqid>1</reqid>
49
		<localid>
50
			<type>lan</type>
51
		</localid>
52
		<remoteid>
53
			<type>network</type>
54
			<address>10.14.0.0</address>
55
			<netbits>24</netbits>
56
		</remoteid>
57
		<protocol>esp</protocol>
58
		<encryption-algorithm-option>
59
			<name>aes128gcm</name>
60
			<keylen>128</keylen>
61
		</encryption-algorithm-option>
62
		<hash-algorithm-option>aesxcbc</hash-algorithm-option>
63
		<pfsgroup>32</pfsgroup>
64
		<lifetime>3600</lifetime>
65
		<pinghost></pinghost>
66
		<descr><![CDATA[Expanded IKE Numbering Test]]></descr>
67
	</phase2>
68
</ipsec>
    (1-1/1)