<div class="content"><p>The <b>IKEV2_TUNNEL_CONFIG_PARAMS_2</b> structure<a id="Appendix_A_Target_167"></a><a aria-label="Product behavior note 167" href="3bb906f0-b077-47ab-ad11-d8d807afde26#Appendix_A_167" data-linktype="relative-path">&lt;167&gt;</a> is used to get or set
configured parameters for IKEv2 devices <a href="https://go.microsoft.com/fwlink/?LinkId=90469" data-linktype="external">[RFC4306]</a>.</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwIdleTimeout</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwNetworkBlackoutTime</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwSaLifeTime</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwSaDataSizeForRenegotiation</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwConfigOptions</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwTotalCertificates</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>certificateNames
  (variable)</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>machineCertificateName
  (variable)</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>dwEncryptionType</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>customPolicy</p>
  </td>
 </tr>
 <tr>
  <td colspan="32">
  <p>...</p>
  </td>
 </tr>
</tbody></table><p><b>dwIdleTimeout (4 bytes): </b>Same as <b>dwIdleTimeout</b>
in <a href="de7aef9f-4865-4281-b800-db5142bf7a45" data-linktype="relative-path"><b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b></a>.
</p><p><b>dwNetworkBlackoutTime (4 bytes): </b>Same as <b>dwNetworkBlackoutTime</b>
in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>.</p><p><b>dwSaLifeTime (4 bytes): </b>Same as <b>dwSaLifeTime</b>
in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>.</p><p><b>dwSaDataSizeForRenegotiation (4 bytes): </b>Same
as <b>dwSaDataSizeForRenegotiation</b> in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>. </p><p><b>dwConfigOptions (4 bytes): </b>Same as <b>dwConfigOptions</b>
in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>. </p><p><b>dwTotalCertificates (4 bytes): </b>Same as <b>dwTotalCertificates</b>
in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>.</p><p><b>certificateNames (variable): </b>Same as <b>certificateNames</b>
in <b>IKEV2_TUNNEL_CONFIG_PARAMS_1</b>. </p><p><b>machineCertificateName (variable): </b>This MUST
be a <a href="b44c33b9-607a-4fee-894c-8af13f86ac5a" data-linktype="relative-path"><b>CERT_BLOB_1</b></a>.
This member specifies the certificate configured to be sent to the peer for
authentication during the main mode (MM SA) negotiation [RFC4306] for the IKE2
tunnel-based VPN connections. A zero (0) value for the <b>cbData</b> member of
CERT_BLOB_1 indicates that no certificate is configured. </p><p><b>dwEncryptionType (4 bytes): </b>Specifies the
encryption type to be negotiated during the SA negotiation [RFC4306] for the
IKE2 tunnel-based VPN connections. This SHOULD have one of the values in the
following table.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Value</p>
   </th>
   <th>
   <p>Meaning</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>0</p>
  </td>
  <td>
  <p>RRAS will not negotiate encryption.</p>
  </td>
 </tr><tr>
  <td>
  <p>1</p>
  </td>
  <td>
  <p>RRAS requests encryption during negotiation.
  Negotiation will succeed even if remote RRAS does not support encryption.</p>
  </td>
 </tr><tr>
  <td>
  <p>2</p>
  </td>
  <td>
  <p>RRAS requires encryption to be negotiated.</p>
  </td>
 </tr><tr>
  <td>
  <p>3</p>
  </td>
  <td>
  <p>RRAS requires maximum-strength encryption to be
  negotiated.</p>
  </td>
 </tr></tbody></table>
</dd></dl><p><b>customPolicy (8 bytes): </b>This MUST be a pointer
to <a href="10f3a637-ab9c-49fe-b819-a5337ad54098" data-linktype="relative-path"><b>ROUTER_CUSTOM_IKEv2_POLICY_0</b></a>
that specifies the custom IKEv2 configurations to be used during the SA
negotiation [RFC4306]. The NULL value for this member indicates that no custom
IKEv2 configuration is available. </p></div>