In local extensions for Compliance Suite, PRIME and FOUNDATION is disallowed for NSX-v 6.4.6
search cancel

In local extensions for Compliance Suite, PRIME and FOUNDATION is disallowed for NSX-v 6.4.6

book

Article ID: 321255

calendar_today

Updated On:

Products

VMware NSX Data Center for vSphere

Issue/Introduction

This article provides information as per standards of Compliance Suite PRIME & FOUNDATION 'ikelifetime' and 'salifetime' values are fixed and should not be changed.

The values as per standard are ikelifetime=86400 & salifetime=28800.

Symptoms:
In Ipsec VPN service configuration of 'ikelifetime' & 'salifetime' in local extensions for Compliance Suite PRIME & FOUNDATION will be disallowed from version 6.4.6.

Environment

VMware NSX Data Center for vSphere 6.4.x

Resolution

Users would not be allowed to configure these parameters for PRIME & FOUNDATION Compliance Suite.

In addition, during the upgrade, prior configured values would be removed and would be configured with default values as per standards.

Workaround:
To work around this issue, In version 6.4.5, you may configure values as ikelifetime=86400 and salifetime=28800 in local extensions for these two Compliance Suite hence you would not find any change during an upgrade.