Configuring IPsec set ipsec ike dh-group
33-4
Defaults
AES-128 is the default encryption type.
Mode
Switch command, read-write, if the security profile = normal.
Switch command, super-user, if the security profile = C2.
Example
This example selects AES-192 as the IPsec encryption type.
C3(su)->set ipsec encryption aes192
set ipsec ike dh-group
Use this command to configure the IKE Diffie-Hellman key exchange group.
Syntax
set ipsec ike dh-group {group-1 | group-2 | group-5 | group-14}
Parameters
Defaults
Diffie-Hellman group 1 is the default.
Mode
Switch command, read-write, if the security profile = normal.
Switch command, super-user, if the security profile = C2.
Example
This example configures IKE to use Diffie-Hellman group 5.
C3(su)->set ipsec ike dh-group group-5
group-1 Configure IKE to use the Diffie-Hellman key exchange group 1 — 768-
bit Diffie-Hellman prime modulus group.
This is the default.
group-2 Configure IKE to use the Diffie-Hellman key exchange group 2 — 1024-
bit Diffie-Hellman prime modulus group.
group-5 Configure IKE to use the Diffie-Hellman key exchange group 5 — 1536-
bit Diffie-Hellman prime modulus group.
group-14 Configure IKE to use the Diffie-Hellman key exchange group 14 —
2048-bit Diffie-Hellman prime modulus group.
To Next Page
Loading...
Need help?
General