Share via


IpsecPolicy interface

An IPSec Policy configuration for a virtual network gateway connection.

Properties

dhGroup

The DH Group used in IKE Phase 1 for initial SA.

ikeEncryption

The IKE encryption algorithm (IKE phase 2).

ikeIntegrity

The IKE integrity algorithm (IKE phase 2).

ipsecEncryption

The IPSec encryption algorithm (IKE phase 1).

ipsecIntegrity

The IPSec integrity algorithm (IKE phase 1).

pfsGroup

The Pfs Group used in IKE Phase 2 for new child SA.

saDataSizeKilobytes

The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.

saLifeTimeSeconds

The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.

Property Details

dhGroup

The DH Group used in IKE Phase 1 for initial SA.

dhGroup: "None" | "DHGroup1" | "DHGroup2" | "DHGroup14" | "DHGroup2048" | "ECP256" | "ECP384" | "DHGroup24"

Property Value

"None" | "DHGroup1" | "DHGroup2" | "DHGroup14" | "DHGroup2048" | "ECP256" | "ECP384" | "DHGroup24"

ikeEncryption

The IKE encryption algorithm (IKE phase 2).

ikeEncryption: "DES" | "DES3" | "AES128" | "AES192" | "AES256" | "GCMAES128" | "GCMAES256"

Property Value

"DES" | "DES3" | "AES128" | "AES192" | "AES256" | "GCMAES128" | "GCMAES256"

ikeIntegrity

The IKE integrity algorithm (IKE phase 2).

ikeIntegrity: "GCMAES128" | "GCMAES256" | "MD5" | "SHA1" | "SHA256" | "SHA384"

Property Value

"GCMAES128" | "GCMAES256" | "MD5" | "SHA1" | "SHA256" | "SHA384"

ipsecEncryption

The IPSec encryption algorithm (IKE phase 1).

ipsecEncryption: "None" | "DES" | "DES3" | "AES128" | "AES192" | "AES256" | "GCMAES128" | "GCMAES192" | "GCMAES256"

Property Value

"None" | "DES" | "DES3" | "AES128" | "AES192" | "AES256" | "GCMAES128" | "GCMAES192" | "GCMAES256"

ipsecIntegrity

The IPSec integrity algorithm (IKE phase 1).

ipsecIntegrity: "GCMAES128" | "GCMAES192" | "GCMAES256" | "MD5" | "SHA1" | "SHA256"

Property Value

"GCMAES128" | "GCMAES192" | "GCMAES256" | "MD5" | "SHA1" | "SHA256"

pfsGroup

The Pfs Group used in IKE Phase 2 for new child SA.

pfsGroup: "None" | "ECP256" | "ECP384" | "PFS1" | "PFS2" | "PFS2048" | "PFS24" | "PFS14" | "PFSMM"

Property Value

"None" | "ECP256" | "ECP384" | "PFS1" | "PFS2" | "PFS2048" | "PFS24" | "PFS14" | "PFSMM"

saDataSizeKilobytes

The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.

saDataSizeKilobytes: number

Property Value

number

saLifeTimeSeconds

The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.

saLifeTimeSeconds: number

Property Value

number