v
New command: priority (IKEv2 policy view) ············································································ 118
New command: priority (IKEv2 profile view) ············································································ 118
New command: proposal ···································································································· 119
New command: reset ikev2 sa ····························································································· 120
New command: reset ikev2 statistics ····················································································· 121
New command: sa duration ································································································· 122
New command: esn enable ································································································· 122
New command: ikev2-profile ······························································································· 123
New command: tfc enable ··································································································· 124
Modified command: ah authentication-algorithm ······································································ 125
Modified command: display ipsec { ipv6-policy | policy } ···························································· 126
Modified command: display ipsec { ipv6-policy-template | policy-template } ·································· 126
Modified command: display ipsec sa ····················································································· 126
Modified command: display ipsec transform-set ······································································ 127
Modified command: display ipsec tunnel ················································································ 127
Modified command: esp authentication-algorithm ···································································· 127
Modified command: esp encryption-algorithm ········································································· 128
Modified command: pfs ······································································································ 129
Modified command: pre-shared-key ······················································································ 130
Modified command: authentication-algorithm ·········································································· 131
New feature: SSL support for Suite B ··············································· 132
Configuring Suite B in SSL ········································································································· 132
Command reference ················································································································· 132
New command: display crypto version ··················································································· 132
New command: ssl version disable ······················································································· 132
New command: ssl renegotiation disable ··············································································· 134
Modified command: version ································································································· 134
Modified command: ciphersuite ···························································································· 135
Modified command: prefer-cipher ························································································· 137
New feature: FIPS support for Suit B ················································ 138
Configuring Suite B in FIPS ········································································································ 138
Command reference ················································································································· 139
New command: fips rng random size filename ········································································ 139
New command: fips rng random size round rate-statistics ························································· 139
New command: fips rng entropy size filename ········································································ 140
New command: fips rng entropy size round rate-statistics ························································· 141
New command: fips kdf ······································································································ 141
New command: fips algorithm verify param ············································································ 142
Modified command: fips self-test ·························································································· 142
New feature: SSH support for Suite B ··············································· 143
Configuring SSH based on Suite B algorithms ··············································································· 143
Specifying a PKI domain for the SSH server ··········································································· 143
Establishing a connection to an Stelnet server based on Suite B ················································ 144
Establishing a connection to an SFTP server based on Suite B ·················································· 144
Establishing a connection to an SCP server based on Suite B ··················································· 145
Specifying algorithms for SSH2 ···························································································· 145
Command reference ················································································································· 147
New command: display ssh2 algorithm ·················································································· 147
New command: ssh server pki-domain ·················································································· 148
New command: scp ipv6 suite-b ··························································································· 148
New command: scp suite-b ································································································· 151
New command: sftp ipv6 suite-b ··························································································· 153
New command: sftp suite-b ································································································· 154
New command: ssh2 ipv6 suite-b ························································································· 156
New command: ssh2 suite-b ······························································································· 158
New command: ssh2 algorithm cipher ··················································································· 160
New command: ssh2 algorithm key-exchange ········································································ 162
New command: ssh2 algorithm mac ····················································································· 163
New command: ssh2 algorithm public-key ·············································································· 164