Fortinet black logo

CLI Reference

config system ike

config system ike

Configure IKE global attributes.

config system ike
    Description: Configure IKE global attributes.
    config dh-group-1
        Description: Diffie-Hellman group 1 (MODP-768).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-14
        Description: Diffie-Hellman group 14 (MODP-2048).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-15
        Description: Diffie-Hellman group 15 (MODP-3072).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-16
        Description: Diffie-Hellman group 16 (MODP-4096).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-17
        Description: Diffie-Hellman group 17 (MODP-6144).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-18
        Description: Diffie-Hellman group 18 (MODP-8192).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-19
        Description: Diffie-Hellman group 19 (EC-P256).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-2
        Description: Diffie-Hellman group 2 (MODP-1024).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-20
        Description: Diffie-Hellman group 20 (EC-P384).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-21
        Description: Diffie-Hellman group 21 (EC-P521).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-27
        Description: Diffie-Hellman group 27 (EC-P224BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-28
        Description: Diffie-Hellman group 28 (EC-P256BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-29
        Description: Diffie-Hellman group 29 (EC-P384BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-30
        Description: Diffie-Hellman group 30 (EC-P512BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-31
        Description: Diffie-Hellman group 31 (EC-X25519).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-32
        Description: Diffie-Hellman group 32 (EC-X448).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-5
        Description: Diffie-Hellman group 5 (MODP-1536).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    set dh-keypair-cache [enable|disable]
    set dh-keypair-count {integer}
    set dh-keypair-throttle [enable|disable]
    set dh-mode [software|hardware]
    set dh-multiprocess [enable|disable]
    set dh-worker-count {integer}
    set embryonic-limit {integer}
end

config system ike

Parameter

Description

Type

Size

Default

dh-keypair-cache

Enable/disable Diffie-Hellman key pair cache.

option

-

enable

Option

Description

enable

Enable Diffie-Hellman key pair cache.

disable

Disable Diffie-Hellman key pair cache.

dh-keypair-count

Number of key pairs to pre-generate for each Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

100 **

dh-keypair-throttle

Enable/disable Diffie-Hellman key pair cache CPU throttling.

option

-

enable

Option

Description

enable

Enable Diffie-Hellman key pair cache CPU throttling.

disable

Disable Diffie-Hellman key pair cache CPU throttling.

dh-mode

Use software (CPU) or hardware (CPX) to perform Diffie-Hellman calculations.

option

-

hardware **

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

dh-multiprocess

Enable/disable multiprocess Diffie-Hellman daemon for IKE.

option

-

enable

Option

Description

enable

Enable multiprocess Diffie-Hellman for IKE.

disable

Disable multiprocess Diffie-Hellman for IKE.

dh-worker-count

Number of Diffie-Hellman workers to start.

integer

Minimum value: 1 Maximum value: 8 **

0

embryonic-limit

Maximum number of IPsec tunnels to negotiate simultaneously.

integer

Minimum value: 50 Maximum value: 20000

5000 **

** Values may differ between models.

config dh-group-1

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-14

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-15

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-16

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-17

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-18

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-19

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-2

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-20

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-21

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-27

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-28

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-29

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-30

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-31

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-32

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-5

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config system ike

Configure IKE global attributes.

config system ike
    Description: Configure IKE global attributes.
    config dh-group-1
        Description: Diffie-Hellman group 1 (MODP-768).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-14
        Description: Diffie-Hellman group 14 (MODP-2048).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-15
        Description: Diffie-Hellman group 15 (MODP-3072).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-16
        Description: Diffie-Hellman group 16 (MODP-4096).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-17
        Description: Diffie-Hellman group 17 (MODP-6144).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-18
        Description: Diffie-Hellman group 18 (MODP-8192).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-19
        Description: Diffie-Hellman group 19 (EC-P256).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-2
        Description: Diffie-Hellman group 2 (MODP-1024).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-20
        Description: Diffie-Hellman group 20 (EC-P384).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-21
        Description: Diffie-Hellman group 21 (EC-P521).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-27
        Description: Diffie-Hellman group 27 (EC-P224BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-28
        Description: Diffie-Hellman group 28 (EC-P256BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-29
        Description: Diffie-Hellman group 29 (EC-P384BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-30
        Description: Diffie-Hellman group 30 (EC-P512BP).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-31
        Description: Diffie-Hellman group 31 (EC-X25519).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-32
        Description: Diffie-Hellman group 32 (EC-X448).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    config dh-group-5
        Description: Diffie-Hellman group 5 (MODP-1536).
        set mode [software|hardware|...]
        set keypair-cache [global|custom]
        set keypair-count {integer}
    end
    set dh-keypair-cache [enable|disable]
    set dh-keypair-count {integer}
    set dh-keypair-throttle [enable|disable]
    set dh-mode [software|hardware]
    set dh-multiprocess [enable|disable]
    set dh-worker-count {integer}
    set embryonic-limit {integer}
end

config system ike

Parameter

Description

Type

Size

Default

dh-keypair-cache

Enable/disable Diffie-Hellman key pair cache.

option

-

enable

Option

Description

enable

Enable Diffie-Hellman key pair cache.

disable

Disable Diffie-Hellman key pair cache.

dh-keypair-count

Number of key pairs to pre-generate for each Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

100 **

dh-keypair-throttle

Enable/disable Diffie-Hellman key pair cache CPU throttling.

option

-

enable

Option

Description

enable

Enable Diffie-Hellman key pair cache CPU throttling.

disable

Disable Diffie-Hellman key pair cache CPU throttling.

dh-mode

Use software (CPU) or hardware (CPX) to perform Diffie-Hellman calculations.

option

-

hardware **

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

dh-multiprocess

Enable/disable multiprocess Diffie-Hellman daemon for IKE.

option

-

enable

Option

Description

enable

Enable multiprocess Diffie-Hellman for IKE.

disable

Disable multiprocess Diffie-Hellman for IKE.

dh-worker-count

Number of Diffie-Hellman workers to start.

integer

Minimum value: 1 Maximum value: 8 **

0

embryonic-limit

Maximum number of IPsec tunnels to negotiate simultaneously.

integer

Minimum value: 50 Maximum value: 20000

5000 **

** Values may differ between models.

config dh-group-1

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-14

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-15

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-16

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-17

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-18

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-19

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-2

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-20

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-21

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-27

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-28

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-29

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-30

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-31

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-32

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0

config dh-group-5

Parameter

Description

Type

Size

Default

mode

Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group.

option

-

global

Option

Description

software

Prefer CPU to perform Diffie-Hellman calculations.

hardware

Prefer CPX to perform Diffie-Hellman calculations.

global

Use global dh-mode setting.

keypair-cache

Configure custom key pair cache size for this Diffie-Hellman group.

option

-

global

Option

Description

global

Use global Diffie-Hellman key pair cache setting.

custom

Use custom Diffie-Hellman key pair cache setting.

keypair-count

Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker).

integer

Minimum value: 0 Maximum value: 50000

0