alwaysUseIke

Value Type

keyword-list

Accepted Values

yes | no

Default Value

no

Description

This option specifies whether or not CDRouter initiates an IKE connection before sending IPSEC packets when verifying IPSEC pass-through functionality. If this testvar is set to no, some of the IPSEC pass-through tests send IPSEC packets without any IKE traffic. This will verify that IPSEC tunnels with manual keys work with IPSEC pass-through. However, some devices may only permit IPSEC traffic if an IKE session has been started. This option should be enabled if the DUT requires an IKE session before passing IPSEC traffic and disabled otherwise.