Required Manual Configuration

For this release, a number of IPsec parameters do not support default values and must be manually configured.

IKE Proposal

For this release, the following IKE proposal parameters do not support default values and must be manually configured:

  • The IKE Diffie-Hellman group.
  • The IKE proposal encryption.
  • The IKE proposal SHA1 hash and integrity (authentication).

IKE Policy

The following IKE policy parameters must be manually configured:

  • The Authentication Pre-Shared Key (PSK)
  • The IKE policy lifetime. This release does not provide a default value.
  • The policy SA peer (server).
  • The IKE proposal assignment to the IKE policy.
  • The IKE version. This release does not provide a default value.

IKE Map

For this release, the following IKE map parameters must be manually configured:

  • The UDP protocol. This release does not provide a default value.
  • The destination IPv4 or IPv6 address (server).
  • The encapsulation mode. This release does not provide a default value.
  • The IKE map lifetime and bandwidth. This release does not provide a default value.
  • The IKE policy assigned to the IKE map.
  • The IKE proposal assigned to the IKE map.
  • The source IPv4 or IPv6 address (local device).