Allied Telesis AR2050V, Справочник по командам, Страница: 2740 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2740
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
VERSION
(ISAKMP)
version (ISAKMP)
Overview Use this command to set the ISAKMP protocol version.
Use the no variant to set the protocol version to default (IKEv2).
Syntax
version {1 mode {aggressive|main}|2}
no version
Default If you do not specify the version, the default version is IKEv2
Mode IPsec ISAKMP Configuration
Examples To set the ISAKMP protocol version of profile “my_profile” to IKEv1 main mode, use
the following commands:
awplus(config)# configure isakmp profile my_profile
awplus(config-isakmp-profile)# version 1 mode main
To set the version to its default, use the following command:
awplus# no version
Related
Commands
crypto isakmp profile
Validation
Commands
show isakmp profile
Parameter Description
1
IKEv1
main
IKEv1 Main mode. An IKE session begins with the initiator and
recipient sending three two-way exchanges to define what
encryption and authentication protocols are acceptable, how
long keys should remain active, and whether perfect forward
secrecy should be enforced. Main mode uses more packets for
the process than Aggressive mode, but Main mode is considered
more secure.
aggressive
IKEv1 Aggressive mode. The initiator and recipient accomplish
the same objectives, but in only two exchanges.
2
IKEv2