---
title: Configure IPsec settings
description: This section describes the operations fo…
url: "https://manual.amnimo.com/docs/advanced-settings/diagram-in-brief-configure-ipsec-settings/"
updated: "2025-07-22"
category: 旧GUI / 詳細設定
---

# Configure IPsec settings

This section describes the operations for adding, editing, and deleting IPsec settings.

### Display a list of IPsec settings

Displays a list of IPsec settings.

  Click on the side menu [ Advanced Configuration and Control ] - [ IPsec Settings ].

The "IPsec Settings" screen displays a list of IPsec settings registered with the product.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-01-1024x371.png)

### Add IPsec settings

Add IPsec settings.

  On the "IPsec Settings" screen, select the tab to add either IKE or SA and click the [ Add New ] button.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-02-1024x269.png)

The "Add IKE Configuration" or "Add SA Configuration" screen will appear.

#### Adding IKE settings

This is how it is set up when the IKE tab is selected.

  Set each item.

❶ Enter any policy name.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-03-1024x179.png)

Enter the address of the local side.

Select All to allow all addresses.
By checking the Local ID checkbox, you can also select a type or enter an ID.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-04-1024x129.png)

❸ Enter the address of the remote side (connection destination).

Select All to allow all addresses.
By checking the Remote ID checkbox, you can also select the type and enter the ID.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-05-1024x112.png)

❹ Select the IKE version.
❺ Set the Pre-Shared Key (PSK).
❻ Specify the IKE mode. This mode is valid only when version 1 is selected in ❹ .

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-06-1024x222.png)

❼ Set the number of retries in the range of 1 to 255.

Select "No limit" for no limit on the number of retries.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-07-1024x83.png)

❽ Sets the lifetime of IKE. It can be specified in seconds, minutes, or hours.
❾ Specify the behavior when disconnected by DPD (Dead Peer Detection).
❿ Set the interval for DPD. It can be specified in seconds, minutes, or hours.
⓫ Sets the timeout for DPD. It can be specified in seconds, minutes, or hours.
⓬ Check the Transform Settings checkbox to enable operation limited to specified transforms only.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-08-1024x375.png)

  In the list of transformations, click on "Add New".

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-09-1024x283.png)

  Set the following items (1) to (4) and click the [ Setup ] button.

Select the encryption algorithm.
❷ Select the authentication algorithm.
❸ Specify the PRF (Pseudo-Random Functions). This is valid only for IKEv2.
❹ Select Diffie Hellman Groups.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-10-824x1024.png)

  When settings are complete, click Settings.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-11-1024x259.png)

#### Adding SA settings

This is how it is set up when the SA tab is selected.

  Set the following items (1) to (11).

❶ Enter any policy name.
Click the ❷ toggle to enable/disable.
❸ Specifies the IKE name used for key exchange.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-12-1024x368.png)

❹ Select IPsec connection behavior.

 **NOTE**

IPsec connections work in the following order

- Perform the INITIATE operation
- Add a route (initiate operation by communication)
- Only SA setting is performed (initiate operation is not performed)

Note that when an initiate communication is received from the other party in all settings, it will operate as responder side if possible.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-13-1024x95.png)

❺ Select the IPsec disconnect behavior.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-23-1024x85.png)

❻ Check Reconnect to enable reconnection.
❼ Select the protocol type.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-14-1024x133.png)

❽ Select the communication mode.

 **NOTE**

If pass-through mode is selected, the local and remote subnets described below are required.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-15-1024x80.png)

❾ Set the SA lifetime. It can be specified in seconds, minutes, or hours.
❿ Select the priority.
⓫ Set the subnet for the local side. (Multiple settings allowed.)
⓬ Set the subnet for the remote side. (Multiple settings are allowed.)
⓭ Check [Transform Settings] to enable the operation to be limited to the specified transform only.

 **NOTE**

The priority can be set by entering a numerical value or selecting "Auto".
The lower the number, the higher the priority.

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-16-1-1024x490.png)

  Click [ Add New ] in the list of transformations

![](https://manual.amnimo.com/wp-content/uploads/2025/02/G0713-17-1024x301.png)

  Set the following items (1) to (3) and click the [ Setup ] button.

❶ Select the encryption algorithm.
❷ Select the authentication algorithm.
❸ Specify PFS (Perfect Forward Secrecy).

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-18-1024x925.png)

  When settings are complete, click Settings.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-19-1024x374.png)

### Edit IPsec settings

Edit the registered IPsec settings.

  On the "IPsec Settings" screen, click [...] to the right of the IPsec setting you wish to edit and select [ Edit ] from the operation menu that appears.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-20-1-1024x297.png)

The "Edit IKE Settings" or "Edit SA Settings" screen will appear.

  Edit the settings and click the [ Settings ] button.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-19-1024x374.png)

The information in the modified IKE or SA settings will be updated.

### Delete IPsec settings

To delete registered IPsec settings, you can either delete them individually from the IPsec operation menu, or you can delete them after selecting all IPsec settings you wish to delete.

#### Delete IPsec settings individually

This method is to select Delete from the operation menu of IPsec settings.

  On the "IPsec Settings" screen, click [...] to the right of the IPsec setting you wish to delete and select [ Delete ] from the operation menu that appears.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-21-1024x296.png)

The "Confirmation" screen appears.

  Click the [ Delete ] button.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-22-1024x548.png)

IPsec settings are deleted.

#### Selecting and deleting multiple IPsec settings

This method is used to delete IPsec settings after checking the check boxes of the IPsec settings you wish to delete. This is useful when deleting multiple IPsec settings at once; you can also select a single IPsec setting to delete.

  On the "IPsec Settings" screen, click the checkbox to the left of the IPsec setting you wish to delete, place a checkmark in the checkbox, and click the [ Delete ] button.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-23-1024x300.png)

The "Confirmation" screen appears.

  ［Click the Delete button.

![](https://manual.amnimo.com/wp-content/uploads/2024/07/G0713-22-1024x548.png)

The selected IPsec settings are deleted.