Chapter5InternetKeySwitchingProtocolCommands
nogroup
Syntax
Description
1
ISAKMPnegotiationDHexchangegroup1,
MODPgroupis768bits
2
ISAKMPnegotiationpolicyDHexchange
group2,MODPgroupis1024bits
DefaultsItisISAKMPnegotiationDHexchangegroup1bydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthis
command.
�ItisimplementedmainlyonGARcurrently.
�ThiscommandsupportshierarchycongurationunderISAKMP
policy.
ExampleItissupposedthatIKEsecuritypolicy“1”hasbeencreatedonthe
routerR1.ThisexampledescribeshowtosettheDHexchange
groupforthissecuritypolicy.
ZXR10(config)#isakmppolicy1
ZXR10(config-isakmp)#group1
ZXR10(config-isakmp)#group2
ZXR10(config-isakmp)#nogroup
Related
Commands
isakmppolicy
showisakmppolicy
hash
PurposeUsethiscommandtodesignateIKEpolicyhashalgorithm.
CommandModesISAKMPnegotiationpolicyconguration
Syntaxhash{md5|sha1}
nohashnohash
Syntax
Description
md5ISAKMPnegotiationpolicyhashalgorithmis
md5
sha1ISAKMPnegotiationpolicyhashalgorithmis
sha1
DefaultsIfthisareaiscongured,itissha1bydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�ThiscommandsupportshierarchycongurationunderISAKMP
policy.
ExampleItissupposedthatIKEsecuritypolicy“1”hasbeencreatedonthe
routerR1.Thisexampledescribedhowtosetthehashalgorithm
forthesecuritypolicy.
ZXR10(config)#isakmppolicy1
CondentialandProprietaryInformationofZTECORPORATION55