Networking::IPsecPolicy

Introduced : BIG-IP_v11.2.0
This interface configures the IPsec Protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session.

Methods

Method Description Introduced
create Creates a set of IPsec policies. BIG-IP_v11.2.0
delete_all_policies Deletes all IPsec policies. BIG-IP_v11.2.0
delete_policy Deletes a set of IPsec policies. BIG-IP_v11.2.0
get_auth_algorithm Gets IPsec auth algorithms for the specified IPsec policies. BIG-IP_v11.2.0
get_description Gets the descriptions for the specified IPsec policies. BIG-IP_v11.2.0
get_encrypt_algorithm Gets IPsec encrypt algorithms for the specified IPsec policies. BIG-IP_v11.2.0
get_forward_secrecy Gets IPsec forward secrecies for the specified IPsec policies. BIG-IP_v11.2.0
get_ipcomp_algorithm Gets IPComp compression algorithm for the specified IPsec policies. BIG-IP_v11.4.0
get_ipcomp_deflate_level Gets the compression level used by the specified IPsec policies. BIG-IP_v11.4.0
get_lifetime Gets IPsec lifetimes for the specified IPsec policies. BIG-IP_v11.2.0
get_lifetime_kilobytes Gets IPsec lifetimes for the specified IPsec policies. BIG-IP_v11.4.0
get_list Gets the names for all IPsec policies. BIG-IP_v11.2.0
get_local_address Gets IPsec local addresses for the specified IPsec policies. BIG-IP_v11.2.0
get_mode Gets IPsec modes for the specified IPsec policies. BIG-IP_v11.2.0
get_protocol Gets IPsec protocols for the specified IPsec policies. BIG-IP_v11.2.0
get_remote_address Gets IPsec remote addresses for the specified IPsec policies. BIG-IP_v11.2.0
get_version Gets the version information for this interface. BIG-IP_v11.2.0
set_auth_algorithm Sets IPsec auth algorithms for the specified IPsec policies. BIG-IP_v11.2.0
set_description Sets the descriptions for the specified IPsec policies. This is an arbitrary field which can be used for any purpose. BIG-IP_v11.2.0
set_encrypt_algorithm Sets IPsec encrypt algorithms for the specified IPsec policies. BIG-IP_v11.2.0
set_forward_secrecy Sets IPsec forward secrecies for the specified IPsec policies. BIG-IP_v11.2.0
set_ipcomp_algorithm Sets IPComp compression algorithms for the specified IPsec policies. BIG-IP_v11.4.0
set_ipcomp_deflate_level Sets the compression level used by the specified IPsec policies. This option is only valid when the IPComp compression algorithm is DEFLATE. The range is 1 to 9. A higher value causes the CPU to spend more time looking for matches, which may result in better compression. The default value is 1. BIG-IP_v11.4.0
set_lifetime Sets IPsec lifetimes for the specified IPsec policies. Specifies the lifetime duration for the dynamically negotiated SAs. This attribute is valid only when IKE is used to negotiate Security Associations. BIG-IP_v11.2.0
set_lifetime_kilobytes Sets IPsec lifetimes for the specified IPsec policies. Specifies the lifetime duration for the dynamically negotiated SAs. This attribute is valid only when IKE is used to negotiate Security Associations. BIG-IP_v11.4.0
set_local_address Sets IPsec local addresses for the specified IPsec policies. For a policy that uses Tunnel mode, sets the local endpoint IP address of the IPsec tunnel. BIG-IP_v11.2.0
set_mode Sets IPsec modes for the specified IPsec policies. BIG-IP_v11.2.0
set_protocol Sets IPsec protocols for the specified IPsec policies. BIG-IP_v11.2.0
set_remote_address Sets IPsec remote addresses for the specified IPsec policies. For a policy that uses Tunnel mode, sets the remote endpoint IP address of the IPsec tunnel. BIG-IP_v11.2.0

Structures

Structure Description

Enumerations

Enumeration Description

Exceptions

Exception Description

Constants

Constant Type Value Description

Aliases

Alias Type Description

See Also

iControl ::
iControl :: Networking :: IPsecPolicy

Warning

The links to the sample code below are remnants of the old DevCentral wiki and will result in a 404 error. For best results, please copy the link text and search the codeshare directly on DevCentral.

Sample Code


Copyright © 1996-2012, F5 Networks, Inc. All rights reserved.

The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.