H3C SOHO IE4300, Command Reference Manual

Page: 2309 / 3296

62
IKE commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for
features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more
information about FIPS mode, see
Security Configuration Guide .
authentication-algorithm
Use
authentication-algorithm
to specify an authentication algorithm for an IKE proposal.
Use
undo authentication-algorithm
to restore the default.
Syntax
In non-FIPS mode:
authentication-algorithm { md5 | sha | sha256 | sha384 | sha512 }
undo authentication-algorithm
In FIPS mode:
authentication-algorithm { sha | sha256 | sha384 | sha512 }
undo authentication-algorithm
Default
In non-FIPS mode:
The IKE proposal uses the HMAC-SHA1 authentication algorithm.
In FIPS mode:
The IKE proposal uses the HMAC-SHA256 authentication algorithm.
Views
IKE proposal view
Predefined user roles
network-admin
Parameters
md5
: Specifies the HMAC-MD5 algorithm.
sha : Specifies the HMAC-SHA1 algorithm.
sha256 : Specifies the HMAC-SHA256 algorithm.
sha384
: Specifies the HMAC-SHA384 algorithm.
sha512
: Specifies the HMAC-SHA512 algorithm.
Examples
# Specify HMAC-SHA1 as the authentication algorithm for IKE proposal 1.
<Sysname> system-view
[Sysname] ike proposal 1
[Sysname-ike-proposal-1] authentication-algorithm sha
Related commands
display ike proposal