Abbreviations for configuration parameters in IPsec examples
Abbreviations are used for configuration parameters in the configuration examples. Replace the abbreviations with the appropriate addresses and values for your configuration.
| Parameter | Description |
|---|---|
| <supported_ipsec_cipher> | Select an IPsec cipher supported by the service. |
| <supported_ike_cipher> | Select an IKE cipher supported by the service. |
| <supported_dh_group> | Select a DH group supported by the service. |
| <primary_destination_address> | The Cloud FQDN of the Forcepoint Data Security Cloud | SSE data center for your
primary tunnel. Displayed for the connection in the in Forcepoint Data Security Cloud | SSE. To know the public IP address of the primary data center, you need to nslookup using the Cloud FQDN. |
| <Secondary_destination_address> | The Cloud FQDN of the Forcepoint Data Security Cloud | SSE data center for your
secondary tunnel. Displayed for the connection in the in Forcepoint Data Security Cloud | SSE. To know the public IP address of the secondary data center, you need to nslookup using the Cloud FQDN. |
| <outgoing_interface> | The name of the egress interface on your edge device. |
| <incoming_interface> | The name of the ingress interface on your edge device. |
| <pre-shared_key> | The pre-shared key configured for the tunnel. Must match the key configured for the connection and can be found under the in Forcepoint Data Security Cloud | SSE. |
| <local_fqdn_id> | The FQDN (DNS hostname) of the edge device. |
| <public_egress_IP> | The public egress IP address of the edge device. |
| <primary_cloud_ike_id> | The Cloud IKE ID for the Forcepoint Data Security Cloud | SSE primary data center. Displayed for the connection under the in Forcepoint Data Security Cloud | SSE portal. |
| <secondary_cloud_ike_id> | The Cloud IKE ID for the Forcepoint Data Security Cloud | SSE secondary data center. Displayed for the connection under the in Forcepoint Data Security Cloud | SSE. |
| <primary_monitoring_address> | The tunnel monitoring IP address for the primary tunnel connection. Displayed for the connection under the in Forcepoint Data Security Cloud | SSE. |
| <secondary_monitoring_address> | The tunnel monitoring IP address for the secondary tunnel connection. Displayed for the connection under the in Forcepoint Data Security Cloud | SSE. |
| <client_subnet> | IP address range for the internal subnet whose traffic will be forwarded to the tunnel. |
| <dummy_subnet#_ip#> | Dummy private IP addresses used as the inner tunnel IP addresses for routing traffic to the tunnel interface. |