ipsec Commands
596
E-DOC-CTC-20080409-0002 v2.0
ipsec peer descriptor modify
Changes a phase 1 (IKE) security descriptor.
SYNTAX:
ipsec peer descriptor modify name = <{AES_SHA1|AES_MD5|3DES_SHA1|3DES_MD5|
DES_SHA1|DES_MD5|AES_SHA1_Adv|3DES_SHA1_Adv}>
[crypto = <{DES|3DES|AES}>]
[keylen = <{0|128|192|256}>]
[integrity = <{MD5|SHA1}>]
[group = <{MODP768|MODP1024|MODP1536}>]
[lifetime_secs = <number>]
where:
name Security descriptor profile to change. REQUIRED
crypto Specify the crypto algorithm to use. OPTIONAL
keylen Specify the key length for the crypto algorithm. OPTIONAL
integrity Specify the integrity algorithm to use. OPTIONAL
group Specify the DH group : MOD768(DH1),
MOD1024(DH2), MOD1536(DH5)
OPTIONAL
lifetime_secs The lifetime expressed in seconds (Lifetime must
differ from 0 otherwise unset).
OPTIONAL