HoB HOBLink, Administration Manual

Page: 69 / 83

HOBLink VPN Gateway Configuring XML Parameters for HOBLink VPN Gateway
Security Solutions by HOB 69
6.6.3 List of IKEv2 schemes
The List of IKEv2 schemes (
ike2-scheme-list
) contains a list of IKEv2 schemes
used in the VPN Peers (
vpn\peer-list\peer-entry\ike2-scheme-name
)
configuration. For XML every list element is grouped in the node
ike2-scheme-
entry
.
Hash
hash
This is a prioritized comma-
separated list of hash methods.
The supported methods are
HMAC_MD5 and HMAC_SHA1. If
‘authentication’ is DSA, the use of
HMAC_SHA1 is required
Gateway
Authentication
authentication
This is a prioritized comma-
separated list of authentication
methods. The supported methods
are 'RSA signatures' (RSA), 'DSA
signatures' (DSA), 'Pre-shared
Key' (PRESHAREDKEY)
Pre-shared Key
preshared-key
This is the pre-shared key string. It
is mandatory only if 'authentication'
includes PRESHAREDKEY and
'preshared-key-encrypted' is not
specified
Pre-shared Key
encrypted
preshared-key-
encrypted
This is the pre-shared key string
encrypted. This value, encoded
with Base 64, takes precedence
over 'preshared-key'
Name of certificate
certificate-name
This is the name of the certificate
used when the list of
'authentication' includes DSA or
RSA. If this field is empty, the first
certificate in the database is used
Parameters XML Name Description
Name
name
This is the unique name of the
IKEv2 scheme
Description
description
This may be edited as desired
Initiator Identification
Type
initiator-id-
type
The supported types are 'IP
Address' (INETA) and 'Fully
Qualified Distinguished Name'
(FQDN)
Enable authentication
retries
enable-auth-
retry
Check if it should be repeat the
authentication process several
times after a failed authentication
(YES/NO). The value by default is
'YES'