Skip to content

IKEv2 Policy

Location in GUI: Objects » Object Management » VPN » IKEv2 Policies

Diagram
NameTypeConstraintMandatoryDefault Value
ikev2_policiesList[ikev2_policies]No

NameTypeConstraintMandatoryDefault Value
nameStringYes
descriptionStringmax: 255No
dh_groupsListInteger[min: 1, max: 31]Yes
encryption_algorithmsListChoice[DES, 3DES, AES, AES-192, AES-256, AES-GCM, AES-GCM-192, AES-GCM-256, NULL]Yes
integrity_algorithmsListChoice[SHA, SHA-256, SHA-384, SHA-512, MD5, NULL]Yes
lifetimeIntegermin: 120, max: 2147483647Yes
prf_algorithmsListChoice[SHA, SHA-256, SHA-384, SHA-512, MD5]Yes
priorityIntegermin: 1, max: 65535Yes

fmc:
domains:
- name: Global
objects:
ikev2_policies:
- name: MyIKEv2Policy1
dh_groups:
- 14
- 24
encryption_algorithms:
- AES-256
- AES-GCM-256
integrity_algorithms:
- SHA-256
- SHA-384
lifetime: 28800
priority: 1
prf_algorithms:
- SHA-256