Lenovo RackSwitch G8332, Command Reference Manual

Page: 585 / 776

© Copyright Lenovo 2016 Chapter 4: Configuration Commands
585
IKEv2 Proposal Configuration
The following table describes the commands used to configure an IKEv2 proposal.
IKEv2 proposal includes an encryption algorithm (cipher), an authentication
algorithm type and a Diffie ‐ Hellman (DH) group, which determines the strength
of the key used in the key exchange process. Higher DH group numbers are more
secure but require additional time to compute the key.
Table 317.
IKEv2 Proposal Options
Command Syntax and Usage
ikev2 proposal
Enter IKEv2 proposal mode.
Command mode: Global configuration
encryption {3des|aes ­ cbc}
Configures IKEv2 encryption mode.
The default value is
3des
.
Command mode: IKEv2 proposal
group 24
Configures the DH group.
The default group is
2
.
Command mode: IKEv2 proposal
integrity sha1
Configures the IKEv2 authentication algorithm type.
The default value is
sha1
.
Command mode: IKEv2 proposal
show ikev2 proposal
Displays the current IKEv2 Proposal configuration.
Command mode: All