Efficient Networks
®
Router family
Command Line Interface Guide
Chapter 12: IKE/IPsec Commands
Efficient Networks
®
Page 12-25
ike ipsec proposals set ahauth
Sets the proposal parameter that determines whether AH message authentication is
requested and, if it is requested, the hash algorithm used.
NOTE:
The proposal must select either the AH or ESP encapsulation methods. It cannot
request AH authentication if it requests ESP encryption and/or ESP authentication.
For more information, see “
ESP and AH Security Protocols” on page 5-51.
Or, see
“
IKE IPSec Proposal Commands” on page 5-58.
Mgmt Class
Security (R/W)
Input Format
ike ipsec proposals set ahauth <md5 | sha1 | none>
<proposalname>
Parameters
Example
Response
Command prompt.
md5
Use AH encapsulation and authenticate using hash algorithm
Message Digest 5.
sha1
Use AH encapsulation and authenticate using hash algorithm
Secure Hash Algorithm-1.
none
No AH encapsulation and no AH message authentication. (If you
select this option, ESP encapsulation must be requested by a
ike
ipsec proposals set espenc
or
ike ipsec proposals set espauth
.)
<proposalname>
a
a
ASCII string
Name of the IPsec proposal to which the AH authentication pa-
rameter is added.
b
b
To see the proposal names in use, use the
ike ipsec proposals list
command.
-> ike ipsec proposals set ahauth sha1 myproposal