config system ike
Configure IKE global attributes.
config system ike
Description: Configure IKE global attributes.
config dh-group-1
Description: Diffie-Hellman group 1 (MODP-768).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-14
Description: Diffie-Hellman group 14 (MODP-2048).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-15
Description: Diffie-Hellman group 15 (MODP-3072).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-16
Description: Diffie-Hellman group 16 (MODP-4096).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-17
Description: Diffie-Hellman group 17 (MODP-6144).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-18
Description: Diffie-Hellman group 18 (MODP-8192).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-19
Description: Diffie-Hellman group 19 (EC-P256).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-2
Description: Diffie-Hellman group 2 (MODP-1024).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-20
Description: Diffie-Hellman group 20 (EC-P384).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-21
Description: Diffie-Hellman group 21 (EC-P521).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-27
Description: Diffie-Hellman group 27 (EC-P224BP).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-28
Description: Diffie-Hellman group 28 (EC-P256BP).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-29
Description: Diffie-Hellman group 29 (EC-P384BP).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-30
Description: Diffie-Hellman group 30 (EC-P512BP).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-31
Description: Diffie-Hellman group 31 (EC-X25519).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-32
Description: Diffie-Hellman group 32 (EC-X448).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
config dh-group-5
Description: Diffie-Hellman group 5 (MODP-1536).
set mode [software|hardware|...]
set keypair-cache [global|custom]
set keypair-count {integer}
end
set dh-keypair-cache [enable|disable]
set dh-keypair-count {integer}
set dh-keypair-throttle [enable|disable]
set dh-mode [software|hardware]
set dh-multiprocess [enable|disable]
set dh-worker-count {integer}
set embryonic-limit {integer}
end
config system ike
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
dh-keypair-cache |
Enable/disable Diffie-Hellman key pair cache. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
dh-keypair-count |
Number of key pairs to pre-generate for each Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
100 ** |
||||||
|
dh-keypair-throttle |
Enable/disable Diffie-Hellman key pair cache CPU throttling. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
dh-mode |
Use software (CPU) or hardware (CPX) to perform Diffie-Hellman calculations. |
option |
- |
hardware ** |
||||||
|
|
|
|||||||||
|
dh-multiprocess |
Enable/disable multiprocess Diffie-Hellman daemon for IKE. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
dh-worker-count |
Number of Diffie-Hellman workers to start. |
integer |
Minimum value: 1 Maximum value: 8 ** |
0 |
||||||
|
embryonic-limit |
Maximum number of IPsec tunnels to negotiate simultaneously. |
integer |
Minimum value: 50 Maximum value: 20000 |
5000 ** |
||||||
** Values may differ between models.
config dh-group-1
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-14
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-15
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-16
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-17
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-18
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-19
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-2
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-20
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-21
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-27
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-28
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-29
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-30
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-31
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-32
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||
config dh-group-5
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
mode |
Use software (CPU) or hardware (CPX) to perform calculations for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-cache |
Configure custom key pair cache size for this Diffie-Hellman group. |
option |
- |
global |
||||||||
|
|
|
|||||||||||
|
keypair-count |
Number of key pairs to pre-generate for this Diffie-Hellman group (per-worker). |
integer |
Minimum value: 0 Maximum value: 50000 |
0 |
||||||||