HoB HOBLink, Administration Manual

Page: 68 / 83

Configuring XML Parameters for HOBLink VPN Gateway HOBLink VPN Gateway
68 Security Solutions by HOB
6.6.2 List of Common IKEv2 features
The common features of IKEv2 (
ike2
) contains a list or parameters used for all
IKEv2 connections.
Enable Dead Peer
Detection
DPD
This is used to enable the Dead
Peer Detection (YES/NO). The
value by default is 'YES'
Enable DPD logging
DPD-logging
This is only valid if 'DPD' is
enabled. This is used to enable the
logging of DPD (YES/NO). The
value by default is 'NO'
Inbound data timeout
(s) for DPD
DPD-timer
This is only valid if 'DPD' is
enabled. This is the DPD data
timeout in seconds. The value
should be in the range 1-86400,
and 60 is the value by default
DPD timeout
DPD-timeout
This is only valid if 'DPD' is
enabled. This is the DPD wait
timeout in seconds. The value
should be in the range 1-600, and
10 is the value by default
DPD retries
DPD-retries
This is only valid if 'DPD' is
enabled. This is the number of
DPD retries permitted. The value
should be in the range 0-20, and 2
is the value by default
Parameters XML Name Description
Diffie-Hellman Group
diffie-hellman-
group
This is a prioritized comma-
separated list of Diffie-Hellman
groups. The supported groups are
MODP768, MODP1024,
MODP1536, MODP2048,
MODP3072, MODP4096,
MODP6144, MODP8192,
EC2NGF163, EC2NGF283,
EC2NGF409, EC2NGF571
Encryption
encryption
This is a prioritized comma-
separated list of encryption
methods. The supported methods
are AES128, AES192, AES256,
3DES
Pseudo-random
function
prf
This is a prioritized comma-
separated list of options. The
supported options are
HMAC_MD5, HMAC_SHA1