prf
To specify the Pseudo-Random Function (PRF) algorithm type, use the
prf
command in IKEv2 proposal
configuration mode.
prf
prf-algorithm
Syntax Description
PRF algorithm type. The possible values are sha-1, sha-256, sha-384, and sha-512.
prf-algorithm
Command Default
None
Command Modes
IKEv2 proposal configuration
Command History
Modification
Release
This command is
introduced.
Release
7.0.1
Example
The following is a sample in which an IKEv2 proposal is configured.
RP/0/RP0/CPU0:ios#configure
Thu Mar
7 19:19:30.259 UTC
RP/0/RP0/CPU0:ios(config)#ikev2 proposal proposal1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#encryption aes-cbc-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#integrity sha-1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#
prf sha-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#dh 20
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#commit
Thu Mar
7 19:20:30.916 UTC
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#exit
RP/0/RP0/CPU0:ios(config)#exit
RP/0/RP0/CPU0:ios#show ikev2 proposal proposal1
Thu Mar
7 19:20:48.929 UTC
Proposal Name
: proposal1
=====================================================================================
Status
: Complete
-------------------------------------------------------------------------------------
Total Number of Enc. Alg.
: 1
Encr. Alg.
: CBC-AES-256
-------------------------------------------------------------------------------------
Total Number of Hash. Alg. : 1
Hash. Alg.
: SHA 1
-------------------------------------------------------------------------------------
Total Number of PRF. Alg.
: 1
PRF. Alg.
: SHA 256
-------------------------------------------------------------------------------------
Total Number of DH Group
: 1
DH Group
: Group 20
Command Reference for Cisco NCS 1004
63
Commands
prf