Dell PowerConnect W-7200 Series, Reference Manual

Page: 214 / 1538

214 | crypto isakmp policy Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
crypto isakmp policy
crypto isakmp policy
authentication pre-share|rsa-sig|ecdsa-256|ecdsa-384
encryption 3DES|AES128|AES192|AES256|DES
group 1|2|19|20
hash md5|sha|sha1-96|sha2-256-128|sha2-384-192
prf PRF-HMAC-MD5|PRF-HMAC-SHA1|PRF-HMAC-SHA256|PRF-HMAC-SHA384
lifetime <seconds>
version v1|v2
Description
This command configures Internet Key Exchange (IKE) policy parameters for the Internet Security Association and
Key Management Protocol (ISAKMP).
Syntax
Parameter Description
policy
Configure an IKE policy
<priority>
Specify a number from 1 to 10,000 to define a priority level for the policy. The higher the
number, the higher the priority level.
authentication Configure the IKE authentication method.
pre-share
Use Pre Shared Keys for IKE authentication. This is the default authentication type.
rsa-sig
Use RSA Signatures for IKE authentication.
ecdsa-256
Use ECDSA-256 signatures for IKE authentication.
ecdsa-384 Use ECDSA-384 signatures for IKE authentication.
encryption
Configure the IKE encryption algorithm.
3DES
Use 168-bit 3DES-CBC encryption algorithm. This is the default encryption value.
AES128
Use 128-bit AES-CBC encryption algorithm.
AES192 Use 192-bit AES-CBC encryption algorithm.
AES256
Use 256-bit AES-CBC encryption algorithm.
DES
Use 56-bit DES-CBC encryption algorithm.
group
Configure the IKE Diffie Hellman group.
1 Use the 768-bit Diffie Hellman prime modulus group. This is the default group setting.
2
Use the 1024-bit Diffie Hellman prime modulus group.
19
Use the 256-bit random Diffie Hellman ECP modulus group.