HP 7000 dl Router Series Guia do Utilizador descarregar pdf (Página 389)

SROS Command Line Interface Reference Guide IKE Policy Attributes Command Set

group [1 | 2]

Use the group command to specify the Diffie-Hellman group (1 or 2) to be used by this IKE policy to

generate the keys (which are then used to create the IPSec SA).

Syntax Description

1 768-bit mod P

2 1024-bit mod P

Default Values

By default, group is set to 1.

Command Modes

(config-ike-attribute)# IKE Policy Attribute Configuration Mode

Functional Notes

The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to

be successful.

Usage Examples

The following example sets this IKE policy to use Diffie-Hellman group 2:

(config-ike-attribute)#group

Sem comentários

HP 7000 dl Router Series Guia do Utilizador Página 389