3.48. IPsecManualKeyedTunnel

Description

An IPsec manual keyed tunnel item is used to define an IPsec endpoint and will appear as a logical interface in the system.

Properties

Name
Name of this interface. (Identifier)
LocalNetwork
The network on "this side" of the IPsec tunnel. The IPsec tunnel will be established between this network and the remote network.
RemoteNetwork
The network connected to the remote gateway. The IPsec tunnel will be established between the local network and this network.
LocalEndpoint
Specifies the IP address of the local endpoint.
RemoteEndpoint
Specifies the IP address of the remote endpoint.
CopyDSCP
Copy the DSCP (Differentiated Services Codepoint) value from the inner to the outer IP header. (Default: No)
DSCP
Specifies the DSCP (Differentiated Services Codepoint) value to set in the outer IP header. This value is ignored if copying is enabled. (Default: 0)
CopyDF
Copy the DF (Don't Fragment) value from the inner to the outer IP header. (Default: No)
DF
Specifies the DF (Don't Fragment) value of the outer IP header. This value is ignored if copying is enabled. (Default: 0)
ECN
Enable support for ECN (Explicit Congestion Notification). Allows for ECN values to be propagated from the outer to the inner IP header. Indication of congestion causes packets to be dropped for non-ECN-capable transports. (Default: No)
SourceInterface
The interface that IKE and IPsec traffic is received on. (Default: any)
OuterRoutingTable
The routing table to use for IKE and IPsec traffic. (Default: main)
MTU
Specifies the size (in bytes) of the largest packet that can be forwarded. (Default: 1500)
IPAddress
The interface's IP addresses. (Default: 0)
IP4Broadcast
The interface's IPv4 broadcast address. (Optional)
RoutingTableMembership
Interface's routing table membership. (Default: <all>)
SecurityEquivalentInterfaces
Security and transport equivalent interfaces. (Optional)
Zone
Specifies the zone that this interface is a member of. (Optional)
Comments
Text describing the current object. (Optional)

3.48.1. ESP

Description

Settings for Encapsulating Security Payload (ESP). Specifies algorithm and SPI to use for the manual keyed tunnel.

Properties

Encryption
Algorithm to use for encryption/decryption.
Integrity
Algorithm to use for integrity protection.
SPIIn
Identifier of inbound packets.
EncryptionKeyIn
Shared secret to use for decryption.
IntegrityKeyIn
Shared secret to use for packet integrity verification.
SPIOut
Identifier of outbound packets.
EncryptionKeyOut
The shared secret to use for encryption.
IntegrityKeyOut
The shared secret to use for packet integrity protection.
[Note] Note
This object type does not have an identifier and is identified by the name of the type only. There can only be one instance of this type.