The Internet Key Exchange (IKE) profiles provide information about the algorithms that are used to authenticate, encrypt, and establish a shared secret between network sites when you establish an IKE tunnel.
NSX-T Data Center provides system-generated IKE profiles that are assigned by default when you configure an IPSec VPN or L2 VPN service. The following table lists the default profiles provided.
Default IKE Profile Name | Description |
---|---|
nsx-default-l2vpn-ike-profile |
|
nsx-default-l3vpn-ike-profile |
|
Instead of the default IKE profiles used, you can also select one of the compliance suites supported starting with NSX-T Data Center 2.5. See About Supported Compliance Suites for more information.
If you decide not to use the default IKE profiles or compliance suites provided, you can configure your own IKE profile using the following steps.
Procedure
Results
A new row is added to the table of available IKE profiles. To edit or delete a non-system created profile, click the three-dot menu ( ) and select from the list of actions available.