Zte ZXR10 - Page 71

Chapter5InternetKeySwitchingProtocolCommands
noisakmppolicy<priority>
Syntax
Description
<priority>
ISAKMPpolicysequencenumber ,range:
110000
Defaults
Project
Default
encryptionalgorithm3des
hashalgorithmsha1
authenticationmethodpre-share
Dife-Hellmangroup
group1
lifetime
86400seconds
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�Therangeofpolicysequencenumberis1~10000,thenumber
ofconguredpoliciesisnotmorethan100.Thenegotiation
policyisconguredinglobalcongurationmode.Ifthepolicy
isnotcongured,thedefaultcongurationisadoptedtone-
gotiate.
ExampleInthisexample,IKEnegotiationsecuritypolicyissetontherouter
R1.
ZXR10(config)#isakmppolicy1
ZXR10(config-isakmp)#exit
ZXR10(config)#isakmppolicy2
ZXR10(config-isakmp)#exit
ZXR10(config)#showisakmppolicy
Protectionsuiteofpriority1
encryptionalgorithm:3des
hashalgorithm:sha1
authenticationmethod:pre-share
Diffie-Hellmangroup:group1
lifetime:86400
secondsProtectionsuiteofpriority2
encryptionalgorithm:3des
hashalgorithm:sha1
authenticationmethod:pre-share
Diffie-Hellmangroup:group1
lifetime:86400seconds
Protectionsuiteofprioritydefault
encryptionalgorithm:3des
hashalgorithm:sha1
authenticationmethod:pre-share
Diffie-Hellmangroup:group1
lifetime:86400seconds
ZXR10(config)#noisakmppolicy1
ZXR10(config)#showisakmppolicy
secondsProtectionsuiteofpriority2
encryptionalgorithm:3des
hashalgorithm:sha1
authenticationmethod:pre-share
Diffie-Hellmangroup:group1
lifetime:86400seconds
Protectionsuiteofprioritydefault
encryptionalgorithm:3des
hashalgorithm:sha1
authenticationmethod:pre-share
CondentialandProprietaryInformationofZTECORPORATION59