v 
New command: priority (IKEv2 policy view) ············································································ 118 
New command: priority (IKEv2 profile view) ············································································ 118 
New command: proposal ···································································································· 119 
New command: reset ikev2 sa ····························································································· 120 
New command: reset ikev2 statistics ····················································································· 121 
New command: sa duration ································································································· 122 
New command: esn enable ································································································· 122 
New command: ikev2-profile ······························································································· 123 
New command: tfc enable ··································································································· 124 
Modified command: ah authentication-algorithm ······································································ 125 
Modified command: display ipsec { ipv6-policy | policy } ···························································· 126 
Modified command: display ipsec { ipv6-policy-template | policy-template } ·································· 126 
Modified command: display ipsec sa ····················································································· 126 
Modified command: display ipsec transform-set ······································································ 127 
Modified command: display ipsec tunnel ················································································ 127 
Modified command: esp authentication-algorithm ···································································· 127 
Modified command: esp encryption-algorithm ········································································· 128 
Modified command: pfs ······································································································ 129 
Modified command: pre-shared-key ······················································································ 130 
Modified command: authentication-algorithm ·········································································· 131 
New feature: SSL support for Suite B ··············································· 132 
Configuring Suite B in SSL ········································································································· 132 
Command reference ················································································································· 132 
New command: display crypto version ··················································································· 132 
New command: ssl version disable ······················································································· 132 
New command: ssl renegotiation disable ··············································································· 134 
Modified command: version ································································································· 134 
Modified command: ciphersuite ···························································································· 135 
Modified command: prefer-cipher ························································································· 137 
New feature: FIPS support for Suit B ················································ 138 
Configuring Suite B in FIPS ········································································································ 138 
Command reference ················································································································· 139 
New command: fips rng random size filename ········································································ 139 
New command: fips rng random size round rate-statistics ························································· 139 
New command: fips rng entropy size filename ········································································ 140 
New command: fips rng entropy size round rate-statistics ························································· 141 
New command: fips kdf ······································································································ 141 
New command: fips algorithm verify param ············································································ 142 
Modified command: fips self-test ·························································································· 142 
New feature: SSH support for Suite B ··············································· 143 
Configuring SSH based on Suite B algorithms ··············································································· 143 
Specifying a PKI domain for the SSH server ··········································································· 143 
Establishing a connection to an Stelnet server based on Suite B ················································ 144 
Establishing a connection to an SFTP server based on Suite B ·················································· 144 
Establishing a connection to an SCP server based on Suite B ··················································· 145 
Specifying algorithms for SSH2 ···························································································· 145 
Command reference ················································································································· 147 
New command: display ssh2 algorithm ·················································································· 147 
New command: ssh server pki-domain ·················································································· 148 
New command: scp ipv6 suite-b ··························································································· 148 
New command: scp suite-b ································································································· 151 
New command: sftp ipv6 suite-b ··························································································· 153 
New command: sftp suite-b ································································································· 154 
New command: ssh2 ipv6 suite-b ························································································· 156 
New command: ssh2 suite-b ······························································································· 158 
New command: ssh2 algorithm cipher ··················································································· 160 
New command: ssh2 algorithm key-exchange ········································································ 162 
New command: ssh2 algorithm mac ····················································································· 163 
New command: ssh2 algorithm public-key ·············································································· 164