| Argument | Type | Description |
|---|
| name ( mandatory ) | string | |
| hash-algorithm | enum (md5 | sha1 | sha256 | sha384 | sha512) | |
| prf-algorithm | enum (auto | sha1 | sha256 | sha384 | sha512) | IKEv2 only |
| enc-algorithm | ubit (aes-256, aes-192, aes-128, 3des, des) | |
| dh-group | ubit (x25519, ecp256, ecp384, ecp521, modp6144, modp4096, modp3072, modp2048, modp1536, modp1024, modp768) | |
| lifetime | time | IKEv1 only |
| lifebytes | num | IKEv1 only |
| proposal-check | enum (obey | strict | claim | exact) { obey:1, strict:2, claim:3, exact:4 } | Lifetime check logic (IKEv1 only) |
| nat-traversal | bool | IKEv1 only |
| ppk | enum (no | psk | qkd | psk-ike-initial) | post-quantum preshared key (IKEv2 only) |
| dpd-interval | alt { special: enum (disable-dpd) { disable-dpd:0 }
, num: time [ .. 3600]
} | |
| dpd-maximum-failures | num | IKEv1 only |