dtctl vpn create-ipsec-policy
Usage
dtctl vpn create-ipsec-policy [flags]
Aliases
cip
Description
Create an IPSEC (phase-2) policy defining the data-channel crypto parameters for a VPN connection.
Example
dtctl vpn create-ipsec-policy --vpn-id 0 --name my-ipsec --pfs group14 --auth-algorithm sha256 --encryption-algorithm aes-256 --encapsulation-mode tunnel --transform-protocol esp --lifetime-units seconds --lifetime-value 3600 --description my-ipsec
Flags
| Option | Description |
|---|---|
--auth-algorithm, -a | Authentication algorithm. One of: sha1, sha256, sha384, sha512 (required) |
--description, -d | Description (required) |
--encapsulation-mode, -m | Encapsulation mode. One of: tunnel, transport (required) |
--encryption-algorithm, -e | Encryption algorithm. One of: 3des, aes-128, aes-192, aes-256 (required) |
--lifetime-units, -u | Lifetime units (seconds) (required) |
--lifetime-value, -l | Lifetime value in the given units, e.g. 3600 (required) |
--name, -n | IPSEC policy name (required) |
--pfs, -p | Perfect Forward Secrecy group. One of: group2, group5, group14 (required) |
--transform-protocol, -t | Transform protocol. One of: esp, ah, ah-esp (required) |
--vpn-id, -i | VPN ID (pass 0 to create a standalone policy) (required) |
Related Commands
| Command | Description |
|---|---|
| dtctl vpn update-ipsec-policy | Update an IPSEC policy |
| dtctl vpn delete-ipsec-policy | Delete an IPSEC policy |
| dtctl vpn ipsec-policies | List IPSEC policies |
| dtctl vpn ipsec-policy-details | Show an IPSEC policy |
Global Flags
| Option | Description |
|---|---|
--api-url | Send this command to a different API endpoint, e.g. a test environment (default "https://console.dt.net.tr/api/v1") |
--config, -c | Specify a custom config file Default: ~/.config/dtctl/config.yaml |
--no-headers | Omit the column headers, for scripting Default: false |
--output, -o | Output format: text, wide, vertical, json. text fits the terminal, wide never truncates, vertical prints one field per line Default: text |