The Message profiles table contains the parameters for the status log used by the VPN gateways to communicate their status information to the load balancer cluster.
- Name
- Unique name for this profile
- Interface
- Interface used by the IKEv2 load balancer to exchange status messages with other VPN gateways in the cluster.Possible values:
- Entries from the IPv4 networks table
- IP address
- Specifies the multicast IP address used by the IKEv2 load balancer to communicate on the local network.Default: 239.255.22.11
- Port
- Specifies the port used by the IKEv2 load balancer to communicate on the local network.Default: 1987
- Interval
- Interval (in milliseconds), in which status messages are exchanged between the IKEv2 load balancers.Possible values:
- 0 to 65535
- Default: 500
- Short hold time
- Specifies the time in milliseconds following the last status message, after which the other IKEv2 load balancers flag the device as disabled.Note: The short hold time must be greater than the interval. A recommended value is at least three times the Interval parameter.Possible values:
- 0 to 65535
- Default: 3000
- Replay window
- Size of the replay window (the number of messages) for IKEv2 load-balancer status messages. Messages that fall outside the replay window are dropped.Possible values:
- 1 to 9
- Default: 5
- 0
- Disables the replay detection.
- Max. time skew
- Maximum permitted time deviation (in seconds) of the time stamps in status messages from the IKEv2 load balancer. Messages with a higher skew are dropped.Possible values:
- 0 to 255
- Default: 15
- Secret
- Shared secret for the load balancer communication log.Note: The secret must be the same on all of the VPN gateways in a cluster.Possible values:
- Up to 32 random characters
- Cipher
- Specifies the encryption algorithm used for the status messages from the IKEv2 load balancers.Possible values:
- None (default)
- AES-128-GCM
- AES-192-GCM
- AES-256-GCM
- HMAC
- Specifies the signaling algorithm used for the status messages from the IKEv2 load balancers.Possible values:
- None
- 96 bits (default)
- 128 bits
- Comment
- Enter a descriptive comment for this entry.
