Configuring IKE Settings
To configure IKE settings for the community:
-
Go to Home > Communities.
-
Click the community name.
The Edit page opens.
-
Click VPN Settings > IKE Settings.
-
Configure the IKE settings shown in the table below.
-
Click Save.
Field |
Description |
---|---|
IKE Phase-1 |
|
Encryption |
Select the encryption type that gateways use for Phase-1 IKE negotiations |
Authentication |
Select the authentication protocol for Phase-1 IKE negotiations |
Diffie-Hellman Group |
Select the Diffie-Hellman group to use for Phase-1 IKE negotiations |
Renegotiate every |
Enter the length of the IKE Phase-1 key lifetime in minutes |
IKE Phase-2 |
|
Encryption |
Select the encryption type that gateways use for Phase-2 IKE negotiations |
Authentication |
Select the integrity for Phase-2 IKE negotiations |
Perfect Forward Secrecy |
Enable or disable PFS (Perfect Forward Secrecy) |
Diffie-Hellman Group |
When PFS is enabled, select the Diffie-Hellman group to use for Phase-2 IKE negotiations |
Renegotiate every |
Enter the length of the IKE Phase-2 key lifetime in seconds |
VPN Tunnel Sharing |
Click the level of VPN tunnel sharing between peer gateways |