FPCVpnNetworkIPSecSettings Object
The FPCVpnNetworkIPSecSettings object defines the Internet Protocol security (IPsec) settings for site-to-site virtual private network (VPN) connections to a remote site network.
When IPsec is used for site-to-site VPN connections, in addition to configuring the properties of this object, a valid default gateway must be set for the network adapter that listens for the site-to-site VPN connections.
The FPCVpnNetworkIPSecSettings object can be accessed through the IPSecSettings property of an FPCVpnNetworkConfiguration object when the NetworkConnectionType property of the containing FPCNetwork object is set to fpcIPSecConnection.
Click here to see the
Forefront TMG object hierarchy.
Methods
The FPCVpnNetworkIPSecSettings object defines the following methods.
| Method | Description |
|---|---|
|
Reads the values of all of the object's properties from persistent storage, discarding any changes that have not been saved. |
|
|
Writes the current values of all of the object's properties to persistent storage. |
Properties
The FPCVpnNetworkIPSecSettings object defines the following properties.
| Property | Description |
|---|---|
|
Gets or sets a value from the FpcVpnAuthenticationMethod enumerated type that specifies which IPsec authentication method is to be used. |
|
|
Gets or sets the name of the certification authority (CA) for the certificates used for IPsec authentication. |
|
|
Gets or sets the IP address of the local VPN tunnel endpoint. |
|
|
Gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPsec negotiation process. |
|
|
Gets or sets a value from the FpcVpnEncryptionAlgorithm enumerated type that specifies the encryption algorithm to be used in Phase 1 of the IPsec negotiation process. |
|
|
Gets or sets a value from the FpcVpnIntegrityAlgorithm enumerated type that specifies the integrity algorithm to be used in Phase 1 of the IPsec negotiation process. |
|
|
Gets or sets the Phase 1 rekeying time, in seconds. |
|
|
Gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 2 of the IPsec negotiation process. |
|
|
Gets or sets a value from the FpcVpnEncryptionAlgorithm enumerated type that specifies the encryption algorithm to be used in Phase 2 of the IPsec negotiation process. |
|
|
Gets or sets a value from the FpcVpnIntegrityAlgorithm enumerated type that specifies the integrity algorithm to be used in Phase 2 of the IPsec negotiation process. |
|
|
Gets or sets the amount of data transferred before Phase 2 rekeying, in kilobytes (KB). |
|
|
Gets or sets the Phase 2 rekeying time, in seconds. |
|
|
Gets or sets a Boolean value that indicates whether Phase 2 KB rekeying is to be used. |
|
|
Gets or sets a Boolean value that indicates whether Perfect Forward Secrecy (PFS) is to be used for Phase 2. |
|
|
Gets or sets a Boolean value that indicates whether Phase 2 time-based rekeying is to be used. |
|
|
Gets or sets the preshared key for IPsec authentication. |
|
|
Gets or sets the IP address of the remote VPN tunnel endpoint. |
Interfaces for C++ Programming
This object implements the IFPCVpnNetworkIPSecSettings interface.
Requirements
| Client | Requires Windows Vista or Windows XP. |
|---|---|
| Server | Requires Windows Server 2008. |
| Version | Requires Forefront Threat Management Gateway (TMG). |
| IDL |
Declared in Msfpccom.idl. |
See Also
Send comments about this topic to Microsoft
Build date: 11/30/2009