| Argument | Type | Description |
|---|
| peer ( mandatory ) | enum | |
| auth-method | enum (pre-shared-key | digital-signature | eap | eap-radius | pre-shared-key-xauth | rsa-key | rsa-signature-hybrid) | |
| eap-methods | multi { array-id, method: enum (eap-tls | eap-ttls | eap-peap | eap-mschapv2)
} | EAP methods |
| mode-config | enum (none) | |
| notrack-chain | string | Add dynamic raw notrack rules for dynamic policies |
| my-id | alt { string: composite { type: enum (fqdn | user-fqdn | key-id)
, data: string
}
, address: composite { type: enum (address)
, data: alt { ipv6: ip6Addr
, ip: ipAddr
}
}
, other: enum (auto | dn)
} | |
| remote-id | alt { string: composite { type: enum (fqdn | user-fqdn | key-id)
, data: string
}
, address: composite { type: enum (address)
, data: alt { ipv6: ip6Addr
, ip: ipAddr
}
}
, auto: enum (auto | ignore | dn)
} | |
| match-by | enum (remote-id | certificate) | identity lookup method for the responder |
| key | enum () | key for raw RSA authentication (ike1 only) |
| remote-key | enum () | remote key for raw RSA authentication (ike1 only) |
| secret | string | pre-shared key secret |
| certificate | multi { array-id, certificate: enum
} | local certificate |
| remote-certificate | enum (none) { none:-1 } | use this certificate when peer does not send one |
| username | string | EAP or XAuth user |
| password | string | EAP or XAuth password |
| generate-policy | enum (no | port-override | port-strict) | |
| policy-template-group | enum | |