IPSEC COMMANDS
664
E-DOC-CTC-20100729-0006 v3.0.Copyright 2011Technicolor. All rights reserved.
This document contains Technicolor proprietary and confidential information. Passing on and copying of this document, use,
extraction and communication of its contents, is not permitted without written authorization from Technicolor.
ipsec peer descriptor modify
Changes a phase 1 (IKE) security descriptor.
SYNTAX:
ipsec peer descriptor modify name = <{AES_SHA1|AES_MD5|3DES_SHA1|3DES_MD5|
DES_SHA1|DES_MD5|AES_SHA1_Adv|3DES_SHA1_Adv}>
[crypto = <{DES|3DES|AES}>]
[keylen = <{0|128|192|256}>]
[integrity = <{MD5|SHA1}>]
[group = <{MODP768|MODP1024|MODP1536}>]
[lifetime_secs = <number>]
where:
name Security descriptor profile to change. REQUIRED
crypto Specify the crypto algorithm to use. OPTIONAL
keylen Specify the key length for the crypto algorithm. OPTIONAL
integrity Specify the integrity algorithm to use. OPTIONAL
group Specify the DH group : MOD768(DH1), MOD1024(DH2),
MOD1536(DH5)
OPTIONAL
lifetime_secs The lifetime expressed in seconds (Lifetime must differ from
0 otherwise unset).
OPTIONAL