» panos_ike_crypto_profile
This resource allows you to add/update/delete IKE crypto profiles.
» Import Name
<name>
» Example Usage
resource "panos_ike_crypto_profile" "example" {
name = "example"
dh_groups = ["group1", "group2"]
authentications = ["md5", "sha1"]
encryptions = ["des"]
lifetime_value = 8
authentication_multiple = 3
}
» Argument Reference
The following arguments are supported:
-
name- (Required) The object's name -
dh_groups- (Required, list) List of DH Group entries. Values should have a prefix ifgroup. -
authentications- (Required, list) List of authentication types. This c -
encryptions- (Required, list) List of encryption types. Valid values aredes,3des,aes-128-cbc,aes-192-cbc, andaes-256-cbc. -
lifetime_type- (Optional) The lifetime type. Valid values areseconds,minutes,hours(the default), anddays. -
lifetime_value- (Optional, int) The lifetime value. -
authentication_multiple- (Optional, PAN-OS 7.0+, int) IKEv2 SA reauthentication interval equals authetication-multiple * rekey-lifetime; 0 means reauthentication is disabled.