Zte ZXR10 - Set Pfs; Set Pfslevel

ZXR10CommandManual(SecurityVolume)
ExampleThisexampledescribeshowtocreateanIPSecsecuritypolicy
namedmymapanddesignatethepeeraddressforthispolicy.
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#setpeeripaddress192.168.1.88
ZXR10(config-crypto-map)#nosetpeeripaddress192.168.1.88
ZXR10(config-crypto-map)#setpeerhostnameh2
ZXR10(config-crypto-map)#nosetpeerhostnameh2
Related
Commands
showcryptomap
cryptomap
setpfs
PurposeUsethiscommandtodesignateperfectforwardsecrecy(PFS)
groupforsomepolicy.Removetheconguredperfectforward
secrecy(PFS)groupwiththenoformofthiscommand.
CommandModesDynamicsecuritycongurationandIKEsecurityconguration
Syntaxsetpfs[group1|group2]
nosetpfs
Syntax
Description
group1
SpeciesthatIPSecshouldusethe768-bit
Dife-Hellmanprimemodulusgroupwhen
performingthenewDife-Hellmanexchange
group2
SpeciesthatIPSecshouldusethe1024-bit
Dife-Hellmanprimemodulusgroupwhen
performingthenewDife-Hellmanexchange
Instructions�Theplatformversion4.8.01andupgradeversionssupportthis
command.
�ItisimplementedmainlyonGARcurrently.
�Thepolicyofmanualtypecannotusethiscommand.
ExampleThisexampledescribeshowtocreateanIPSecsecuritypolicy
namedmymapanddesignateforwardsecrecy(PFS)groupforthis
policy.
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#setpfsgroup1
ZXR10(config-crypto-map)#setpfsgroup2
ZXR10(config-crypto-map)#nosetpfs
Related
Commands
showcryptomap
cryptomap
setpfslevel
PurposeUsethiscommandtodesignateperfectforwardsecrecy(PFS)pro-
tectiontypeforpolicy.
76CondentialandProprietaryInformationofZTECORPORATION