The following procedure describes IKE proposal configuration on the Extreme Networks S- K- and 7100-Series devices.
Configuring an IKE Proposal
| Step | Task | Command(s) |
|---|---|---|
| 1 | Enter IKE proposal configuration mode, from the global VRF router configuration mode, to create a new or modify an existing IKE proposal. | crypto ike-proposal proposal-identifier |
| 2 | In IKE proposal configuration mode, configure the IKE Diffie-Hellman (DH) key exchange group for the SA:
|
dh_group {1 | 2 | 14} |
| 3 | In IKE proposal configuration mode, configure the encryption algorithm for the IKE proposal. | encryption {3des | aes128cbc | aes192cbc | aes256cbc} |
| 4 | In IKE proposal configuration mode, configure the hash algorithm for the IKE proposal. | hash sha1 |
| 5 | In IKE proposal configuration mode, configure the integrity (data authentication) algorithm for the IKE proposal. | integrity sha1 |
Refer to the S-, K-, and 7100 Series CLI Reference Guide for more information about each command.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB