AMX NI-2100/3100/4100 - Manual (Page 127)

Appendix A: IPSec Configuration File
119 NI Series WebConsole & Programming Guide
ikeSetPropAttrib
ikeSetPropAttrib
NAME ikeSetPropAttrib – set attributes of an IKE Phase 1 proposal
SYNOPSIS
ikeSetPropAttrib=configString
DESCRIPTION This rule sets the attributes for a previously defined IKE Phase 1 proposal.
Rule Value:
configString
A string formatted as follows:
proposalName,attributeType,attributeValue,[attributeType,attributeV
alue]...
proposalName is the name of an existing Phase 1 proposal. Valid
attribute
type/value pairs are shown in the following table:
Attribute Type Attribute Value
• DHGROUP G1 for DH Group 1 or G2 for DH Group 2
• UNITOFTIME SECS, MINS, or HRS for seconds, minutes or hours; default is minutes.
• LIFETIME Default is 28800 seconds. If the lifetime is greater than 0 and less than
PHASE1_MIN_LIFE_IN_SECS, then it defaults to
PHASE1_MIN_LIFE_IN_SECS, which is defined in ike.h.
• SOFTLIFETIME Default is 75% of the LIFETIME. If the soft lifetime is greater than 0 and
less than PHASE1_MIN_LIFE_IN_SECS then it defaults to
PHASE1_MIN_LIFE_IN_SECS, which is defined in ike.h.
EXAMPLES ikeSetPropAttrib=mm_group2,DHGROUP,G2
ikeSetPropAttrib=mm_group2,LIFETIME,28880,UNITOFTIME,SECS
Config String
Format proposalName,attributeType,attributeValue,[attributeType,
attributeValue]…