Appendix A: IPSec Configuration File
118 NI Series WebConsole & Programming Guide
ikeSetProp

ikeSetProp

NAME ikeSetProp – create a Phase 1 proposal
SYNOPSIS ikeSetProp=configString
DESCRIPTION This rule creates a Phase 1 proposal with previously defined Phase 1 transform names.
Rule Value:
configString
A string formatted as follows:
proposalName,transformName,[transformName][,transformName]...
where
- proposalName is a unique name for a Phase 1 proposal.
- transformName is an existing Phase 1 transform name, defined via ikeSetXform.
EXAMPLES ikeSetProp=mm_group2,mm_3des_sha,mm_3des_md5,mm_des_sha,mm_des_md5
Config String
Format proposalName,transformName,[transformName][,transformName]…
Pre-defined
proposal
names
A transform consists of an encryption algorithm and a hash algorithm. The first value is the
encryption, the second the hash.
mm_3des_sha=3DES,SHA-1
mm_3des_sha2_256=3DES,SHA2-256
mm_3des_sha2_384=3DES,SHA2-384
mm_3des_sha2_512=3DES,SHA2-512
mm_3des_md5=3DES,MD5
mm_des_sha=DES,SHA-1
mm_des_sha2_256=DES,SHA2-256
mm_des_sha2_384=DES,SHA2-384
mm_des_sha2_512=DES,SHA2-512
mm_des_md5=DES,MD5
mm_aes_sha=AES,SHA-1
mm_aes_sha2_256=AES,SHA2-256
mm_aes_sha2_384=AES,SHA2-384
mm_aes_sha2_512=AES,SHA2-512
mm_aes_md5=AES,MD5