Properties

NormalizeNetworks

Normalize i.e. simplify local and remote networks by merging IP address ranges when possible. (Default: Yes)

RetransmitTimeout

Time in seconds from the first packet to the first retransmit. (Default: 0.5)

RetransmitTimeoutMax

Retransmit timeout will grow exponentially for each resend but never higher than this value. (Default: 10)

RetransmitBase

Base for exponential back-off for resending IKE messages. (Default: 1.8)

RetransmitTries

Number of times an IKE message is resent. (Default: 6)

Threads

Total number of IKE threads. (Default: 60)

MaxJobs

Maximum number of IKE jobs allowed to be queued for thread processing before new negotiations are dropped. (Default: 120)

MaxNegotiations

Maximum number of concurrent IKE negotiations allowed before new negotiations are dropped. (Default: 120)

MaxPeerNegotiations

Maximum number of concurrent IKE negotiations allowed from a single peer IP address before new negotiations are dropped. (Default: 60)

CookieThreshold

Maximum number of concurrent IKE negotiations allowed before requesting that new negotiations are retried using a provided cookie. (Default: 80)

CRLCacheTimeout

Maximum number of seconds a CRL is kept in cache, unlimited if set to 0. (Default: 0)

AutoEstablishInterval

Number of seconds to wait before restarting IKE negotiations for tunnels configured for auto-establishment. (Default: 60)