Allied Telesis AR2050V, Справочник по командам, Страница: 2698 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2698
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
CRYPTO ISAKMP PROFILE
crypto isakmp profile
Overview Use this command to configure a custom ISAKMP profile.
An ISAKMP profile comprises one or more transforms that can be configured by
using the
transform (ISAKMP Profile) command.
Use the no variant to delete a previously created profile.
Syntax crypto isakmp profile < profile_name >
no crypto isakmp profile < profile_name >
Default Which ISAKMP profile transform will actually be used depends on how the
negotiation between the peers is carried out when establishing the connection.
For more information about default ISAKMP profiles, see the following table. Note
that you cannot delete or edit the default profile. Expiry time of 24 hours applies to
the default profile.
Mode Global Configuration
Parameter Description
< profile_name >
Profile name. Profile names are case insensitive and can be up to
64 characters long composed of printable ASCII characters.
Profile names can have only letters from a to z and A to Z,
numbers from 0 to 9, - (dash), or _ (underscore).
Table 61-2: ISAKMP default profile
Attribute Encryption Integrity Group Authentication
Transform 1 AES256 SHA256 14 Pre-shared
Transform 2 AES256 SHA256 16 Pre-shared
Transform 3 AES256 SHA1 14 Pre-shared
Transform 4 AES256 SHA1 16 Pre-shared
Transform 5 AES128 SHA256 14 Pre-shared
Transform 6 AES128 SHA256 16 Pre-shared
Transform 7 AES128 SHA1 14 Pre-shared
Transform 8 AES128 SHA1 16 Pre-shared
Transform 9 3DES SHA256 14 Pre-shared
Transform 10 3DES SHA256 16 Pre-shared
Transform 11 3DES SHA1 14 Pre-shared
Transform 12 3DES SHA1 16 Pre-shared