CONFIG IPSEC PROFILE PHASE2 UPDATE

Level

vpn+modify

History

Appears in 9.0.0
replaywsize appears in 9.0.5

Description

Update phase 2 profile

Usage

name=<profilename> [enc=<algo[/size],algo[/size],...>] [auth=<algo[/size],algo[/size],...>] [pfs=<dh>] [lifetime=<seconds>] [replaywsize=<from 0 to 33554400 in steps of 8>] [comment=<str>] [global=<0|1>]
replaywsize: the size should be a power of 2 less 32 (2^x-32) to optimize memory use. Set to 0 to deactivate anti-replay protection.

Example

CONFIG IPSEC PROFILE PHASE2 UPDATE name=myph2 lifetime=21600