518
Examples
# Create the IKE profile
profile1
.
<Sysname> system-view
[Sysname] ike profile profile1
# Enable AAA authorization. Specify the ISP domain
abc
and the username
test
.
[Sysname-ike-profile-profile1] aaa authorization domain abc username test
authentication-algorithm
Use
authentication-algorithm
to specify an authentication algorithm for an IKE proposal.
Use
undo authentication-algorithm
to restore the default.
Syntax
In non-FIPS mode:
authentication-algorithm
{
md5
|
sha
|
sha256
|
sha384
|
sha512
}
undo
authentication-algorithm
In FIPS mode:
authentication-algorithm
{
sha
|
sha256
|
sha384
|
sha512
}
undo authentication-algorithm
Default
In non-FIPS mode, the IKE proposal uses the HMAC-SHA1 authentication algorithm.
In FIPS mode, the IKE proposal uses the HMAC-SHA256 authentication algorithm.
Views
IKE proposal view
Predefined user roles
network-admin
Parameters
md5
: Specifies HMAC-MD5 as the authentication algorithm.
sha
: Specifies HMAC-SHA1 as the authentication algorithm.
sha256
: Specifies HMAC-SHA256 as the authentication algorithm.
sha384
: Specifies HMAC-SHA384 as the authentication algorithm.
sha512
: Specifies HMAC-SHA512 as the authentication algorithm.
Examples
# Specify HMAC-SHA1 as the authentication algorithm for IKE proposal 1.
<Sysname> system-view
[Sysname] ike proposal 1
[Sysname-ike-proposal-1] authentication-algorithm sha
Related commands
display ike proposal
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
