Send documentation comments to mdsfeedback-doc@cisco.com
44-39
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 44 Configuring IPsec Network Security
Default Settings
Default Settings
Table 44-3 lists the default settings for IKE parameters.
Table 44-4 lists the default settings for IPsec parameters.
Ta b l e 44-3 Default IKE Parameters
Parameters Default
IKE Disabled.
IKE version IKE version 2.
IKE encryption algorithm 3DES.
IKE hash algorithm SHA.
IKE authentication method Not configurable (uses preshared keys).
IKE DH group identifier Group 1.
IKE lifetime association 86,400 00 seconds (equals 24 hours).
IKE keepalive time for each peer (v2) 3,600 seconds (equals 1 hour).
Ta b l e 44-4 Default IPsec Parameters
Parameters Default
IPsec Disabled.
Applying IPsec to the traffic. Deny—allowing clear text.
IPsec PFS Disabled.
IPsec global lifetime (traffic-volume) 450 Gigabytes.
IPsec global lifetime (time) 3,600 seconds (one hour).