627
aes-cbc-256: Uses the AES algorithm in CBC mode, which uses a 256-bit key.
aes-ctr-128: Uses the AES algorithm in CTR mode, which uses a 128-bit key.
aes-ctr-192: Uses the AES algorithm in CTR mode, which uses a 192-bit key.
aes-ctr-256: Uses the AES algorithm in CTR mode, which uses a 256-bit key.
camellia-cbc-128: Uses the Camellia algorithm in CBC mode, which uses a 128-bit key.
camellia-cbc-192: Uses the Camellia algorithm in CBC mode, which uses a 192-bit key.
camellia-cbc-256: Uses the Camellia algorithm in CBC mode, which uses a 256-bit key.
des-cbc: Uses the DES algorithm in CBC mode, which uses a 56-bit key.
Usage guidelines
You must specify a minimum of one encryption algorithm for an IKEv2 proposal. Otherwise, the
proposal is incomplete and useless. You can specify multiple encryption algorithms for an IKEv2
proposal. An algorithm specified earlier has a higher priority.
Examples
# Specify the 168-bit 3DES algorithm in CBC mode as the encryption algorithm for the IKE proposal
prop1.
<Sysname> system-view
[Sysname] ikev2 proposal prop1
[Sysname-ikev2-proposal-prop1] encryption 3des-cbc
Related commands
ikev2 proposal
hostname
Use hostname to specify the host name of an IKEv2 peer.
Use undo hostname to restore the default.
Syntax
hostname name
undo hostname
Default
The IKEv2 peer's host name is not specified.
Views
IKEv2 peer view
Predefined user roles
network-admin
Parameters
name: Specifies the host name of the IKEv2 peer, a case-insensitive string of 1 to 253 characters.
Usage guidelines
Only the initiator can look up an IKEv2 peer by host name in IKEv2 negotiation, and the initiator must
use an IPsec policy rather than an IPsec profile.
Examples
# Create an IKEv2 keychain named key1.
<Sysname> system-view
To Next Page
Loading...
Need help?
General
