ipsec-profile

Updates IPSEC profile configuration.
Syntax
ipsec[name]
no ipsec-profile

After ipsec-profile command is entered, the following configuration syntax is available:

{auth-type | cara-server | cara-server-path | cara-subject-name | cmp-dhcp-opt43-subcode | cmp-subject-name-dhcp-opt43-subcode | description | dhcp-opt43-subcode | dpd-delay | esp-rekeytime | esp-type | failover-retry-interval | failover-retry-mode | failover-retry-period | ike-rekeytime | ike-type | ip-compression | keep-alive-interval | nat-traversal | replay-window | retry-limit | security-gateway}
Command Default

IPSEC profile configuration is not updated.

Parameters
auth-type
Set Authentication Type.
cara-server
Set Certificate Management Protocol CA/RA Address.
cara-server-path
Set Certificate Management Protocol Server Path.
cara-subject-name
Set Certificate Management Protocol Subject Name of CA/RA.
cmp-dhcp-opt43-subcode
Set Certificate Management Protocol DHCP Option 43 Sub Code for CA/RA Address.
cmp-subject-name-dhcp-opt43-subcode
Set Certificate Management Protocol DHCP Option 43 Sub Code for Subject Name of CA/RA.
dhcp-opt43-subcode
Set DHCP Option 43 Sub Code for Security Gateway.
dpd-delay
Set Dead Peer Detection.
esp-rekeytime
Set ESP Rekey Time.
esp-type
Set ESP Proposal Type.
failover-retry-interval
Set Fail Over Retry Interval.
failover-retry-mode
Set Fail Over Retry Mode.
failover-retry-period
Set Fail Over Retry Period.
ike-rekeytime
Set IKE Rekey Time.
ike-type
Set IKE Proposal Type.
ip-compression
Enable IP Compression.
keep-alive-interval
Set NAT-T Keep Alive Interval.
nat-traversal
Enable Force NAT-T.
replay-window
Set Replay Window.
retry-limit
Set Retry Limit.
security-gateway
Set Security Gateway.
Modes

Global configuration mode

Usage Guidelines

The no form of this command removes the user specified ipsec profiles.

This command is supported on all SmartZone platforms except SmartZone Data Plane controller.

Examples

The following example displays ipsec-profile.

NODE202# config

NODE202(config)# ip
ip               ipsec-profile

NODE202(config)# ipsec-profile
  <name>     IPsec Profile name

NODE202(config)# ipsec-profile xyz

NODE202(config-ipsec-profile)#
  auth-type                               Set Authentication Type
  cara-server                             Set Certificate Management Protocol CA/RA Address
  cara-server-path                        Set Certificate Management Protocol Server Path
  cara-subject-name                       Set Certificate Management Protocol Subject Name of CA/RA
  cmp-dhcp-opt43-subcode                  Set Certificate Management Protocol DHCP Option 43 Sub Code for CA/RA Address
  cmp-subject-name-dhcp-opt43-subcode     Set Certificate Management Protocol DHCP Option 43 Sub Code for Subject Name of CA/RA
  description                             Set description
  dhcp-opt43-subcode                      Set DHCP Option 43 Sub Code for Security Gateway
  do                                      Do command
  dpd-delay                               Set Dead Peer Detection
  end                                     End the current configuration session and return to privileged EXEC mode
  esp-rekeytime                           Set ESP Rekey Time
  esp-type                                Set ESP Proposal Type
  exit                                    Exit from the EXEC
  failover-retry-interval                 Set Fail Over Retry Interval
  failover-retry-mode                     Set Fail Over Retry Mode
  failover-retry-period                   Set Fail Over Retry Period
  help                                    Display this help message
  ike-rekeytime                           Set IKE Rekey Time
  ike-type                                Set IKE Proposal Type
  ip-compression                          Enable IP Compression
  keep-alive-interval                     Set NAT-T Keep Alive Interval
  name                                    Set IPsec Profile Name
  nat-traversal                           Enable Force NAT-T
  no                                      Disable and delete commands
  replay-window                           Set Replay Window
  retry-limit                             Set Retry Limit
  security-gateway                        Set Security Gateway

NODE202(config-ipsec-profile)# no
cara-server           cara-server-path      cara-subject-name     dpd-delay             esp-rekeytime         ike-rekeytime         ip-compression
keep-alive-interval   nat-traversal         replay-window         retry-limit           security-gateway
Parent topic: Commands G through I