3.48. IPsecManualKeyedTunnel
Description
An IPsec manual keyed tunnel item is used to define an IPsec endpoint and will appear as a logical interface in the system.
Properties
- Name
- Name of this interface. (Identifier)
- LocalNetwork
- The network on "this side" of the IPsec tunnel. The IPsec tunnel will be established between this network and the remote network.
- RemoteNetwork
- The network connected to the remote gateway. The IPsec tunnel will be established between the local network and this network.
- LocalEndpoint
- Specifies the IP address of the local endpoint.
- RemoteEndpoint
- Specifies the IP address of the remote endpoint.
- CopyDSCP
- Copy the DSCP (Differentiated Services Codepoint) value from the inner to the outer IP header. (Default: No)
- DSCP
- Specifies the DSCP (Differentiated Services Codepoint) value to set in the outer IP header. This value is ignored if copying
is enabled. (Default: 0)
- CopyDF
- Copy the DF (Don't Fragment) value from the inner to the outer IP header. (Default: No)
- DF
- Specifies the DF (Don't Fragment) value of the outer IP header. This value is ignored if copying is enabled. (Default: 0)
- ECN
- Enable support for ECN (Explicit Congestion Notification). Allows for ECN values to be propagated from the outer to the inner
IP header. Indication of congestion causes packets to be dropped for non-ECN-capable transports. (Default: No)
- SourceInterface
- The interface that IKE and IPsec traffic is received on. (Default: any)
- OuterRoutingTable
- The routing table to use for IKE and IPsec traffic. (Default: main)
- MTU
- Specifies the size (in bytes) of the largest packet that can be forwarded. (Default: 1500)
- IPAddress
- The interface's IP addresses. (Default: 0)
- IP4Broadcast
- The interface's IPv4 broadcast address. (Optional)
- RoutingTableMembership
- Interface's routing table membership. (Default: <all>)
- SecurityEquivalentInterfaces
- Security and transport equivalent interfaces. (Optional)
- Zone
- Specifies the zone that this interface is a member of. (Optional)
- Comments
- Text describing the current object. (Optional)
Description
Settings for Encapsulating Security Payload (ESP). Specifies algorithm and SPI to use for the manual keyed tunnel.
Properties
- Encryption
- Algorithm to use for encryption/decryption.
- Integrity
- Algorithm to use for integrity protection.
- SPIIn
- Identifier of inbound packets.
- EncryptionKeyIn
- Shared secret to use for decryption.
- IntegrityKeyIn
- Shared secret to use for packet integrity verification.
- SPIOut
- Identifier of outbound packets.
- EncryptionKeyOut
- The shared secret to use for encryption.
- IntegrityKeyOut
- The shared secret to use for packet integrity protection.
![[Note]](images/note.png) |
Note |
This object type does not have an identifier and is identified by the name of the type only. There can only be one instance
of this type.
|