Allied Telesis AR2050V, Справочник по командам, Страница: 2725 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2725
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
TRANSFORM
(ISAKMP P
ROFILE
)
transform (ISAKMP Profile)
Overview Use this command to create an ISAKMP profile transform which specifies the
encryption and authentication algorithms used to protect data in the tunnel.
Use the no variant to delete a previously created transform.
Syntax transform < 1-255 > integrity {sha1|sha256|sha512} encryption
{3des|aes128|aes192|aes256} group {2|5|14|15|16|18}
no transform < 1-255 >
Default By default, an ISASMP profile has no transforms and so will not be active.
Mode ISAKMP Profile Configuration
Examples To create an ISAKMP profile transform, use the following commands:
awplus(config)# crypto isakmp profile my_profile
awplus(config-isakmp-profile)# transform 2 integrity sha1
encryption 3des group 5
Parameter Description
< 1-255 >
Transform priority (1 is the highest)
sha1
Secure Hash Standard with 160-bit digest size
sha256
Secure Hash Standard with 256-bit digest size
sha512
Secure Hash Standard with 512 bit digest size
3des
Triple DES symmetric key block cipher with a 168-bit key
aes128
Advanced Encryption Standard symmetric key block cipher with a
128-bit key
aes192
Advanced Encryption Standard symmetric key block cipher with a
192-bit key
aes256
Advanced Encryption Standard symmetric key block cipher with a
256-bit key
group
Diffie-Hellman group
2
1024-bit MODP Group
5
1536-bit MODP Group
14
2048-bit MODP Group
15
3072-bit MODP Group
16
4096-bit MODP Group
18
8192-bit MODP Group