Networking::ProfileIPsec

Introduced : BIG-IP_v9.0
The ProfileIPsec interface provides IPsec function over the network interface. When packets are sent over the IPsec interface, they are either encrypted/decrypted via the IPsec tunnel or dropped if they failed to pass the IPsec policy. In order to configure an IPsec interface, you need to create an IPsec tunnel profile, which attaches to an IPsec traffic selector, which in turn attaches to an IPsec policy that is in the “interface” mode. The IPsec policy specifies the security association parameters for the IPsec tunnel.

Methods

Method Description Introduced
create Creates a set of IPsec tunnel profiles. BIG-IP_v11.5.0
delete_all_profiles Deletes all non-system IPsec tunnel profiles. BIG-IP_v11.5.0
delete_profile Deletes a set of IPsec tunnel profiles. BIG-IP_v11.5.0
get_default_profile Gets the existing IPsec tunnel profile from which this set of IPsec profiles inherits its unspecified attribute values. BIG-IP_v11.5.0
get_description Gets the descriptions for a set of IPsec tunnel profiles. BIG-IP_v11.5.0
get_list Gets the names of all IPsec tunnel profiles. BIG-IP_v11.5.0
get_traffic_selector Gets the IPsec traffic selectors of the set of IPsec tunnel interfaces. BIG-IP_v11.5.0
get_version Gets the version information for this interface. BIG-IP_v11.5.0
is_base_profile Determines whether the specified IPsec tunnel profiles are base profiles. A base profile sits at the base of the profile&aposs inheritance tree, supplying the defaults for every profile derived from it. (See also is_system_profile). BIG-IP_v11.5.0
is_system_profile Determines whether the specified IPsec tunnel profiles are system profiles. A system profile is a profile pre-configured on the system, ready for use. Non-system profiles are profiles created or modified by a user. Note that if a system profile is modified, it is no longer considered a system profile. (See also is_base_profile). BIG-IP_v11.5.0
set_default_profile Sets the existing IPsec tunnel profile from which this set of IPsec tunnel profiles inherits their unspecified attribute values. BIG-IP_v11.5.0
set_description Sets the description for a set of IPsec tunnel profiles. This is an arbitrary field which can be used for any purpose. BIG-IP_v11.5.0
set_traffic_selector Sets the IPsec traffic selectors for the set of IPsec tunnel interfaces. The Traffic Selector component specifies what traffic you want the system to protect with IPsec tunnel interfaces. BIG-IP_v11.5.0

Structures

Structure Description

Enumerations

Enumeration Description

Exceptions

Exception Description

Constants

Constant Type Value Description

Aliases

Alias Type Description

See Also

iControl ::
iControl :: Networking :: ProfileIPsec

Warning

The links to the sample code below are remnants of the old DevCentral wiki and will result in a 404 error. For best results, please copy the link text and search the codeshare directly on DevCentral.

Sample Code


Copyright © 1996-2012, F5 Networks, Inc. All rights reserved.

The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.