dtctl vpn create-ike-policy
Usage
dtctl vpn create-ike-policy [flags]
Aliases
ck
Description
Create an IKE (phase-1) policy defining the key-exchange crypto parameters for a VPN connection.
Example
dtctl vpn create-ike-policy --vpn-id 0 --name my-ike --pfs group14 --auth-algorithm sha256 --encryption-algorithm aes-256 --version v2 --lifetime-units seconds --lifetime-value 3600
Flags
| Option | Description |
|---|---|
--auth-algorithm, -a | Authentication algorithm. One of: sha1, sha256, sha384, sha512 (required) |
--encryption-algorithm, -e | Encryption algorithm. One of: 3des, aes-128, aes-192, aes-256 (required) |
--lifetime-units, -u | Lifetime units (seconds) (required) |
--lifetime-value, -l | Lifetime value in the given units, e.g. 3600 (required) |
--name, -n | IKE policy name (required) |
--pfs, -p | Perfect Forward Secrecy group. One of: group2, group5, group14 (required) |
--version, -v | IKE version. One of: v1, v2 (required) |
--vpn-id, -i | VPN ID (pass 0 to create a standalone policy) (required) |
Related Commands
| Command | Description |
|---|---|
| dtctl vpn update-ike-policy | Update an IKE policy |
| dtctl vpn delete-ike-policy | Delete an IKE policy |
| dtctl vpn ike-policies | List IKE policies |
| dtctl vpn ike-policy-details | Show an IKE policy |
Global Flags
| Option | Description |
|---|---|
--api-url | Send this command to a different API endpoint, e.g. a test environment (default "https://console.dt.net.tr/api/v1") |
--config, -c | Specify a custom config file Default: ~/.config/dtctl/config.yaml |
--no-headers | Omit the column headers, for scripting Default: false |
--output, -o | Output format: text, wide, vertical, json. text fits the terminal, wide never truncates, vertical prints one field per line Default: text |