Nortel Secure 4134 Configuration page 126

126 IPsec VPN configuration
Variable
group2
group5
Configuring encryption algorithm for IKE proposal
Configure encryption algorithm for the IKE proposal.
Procedure steps
Step
1
2
3
4
5
Table 52
Variable definitions
Variable
des-cbc
3des-cbc
aes128cbc
aes192cbc
aes256cbc
Copyright © 2007, Nortel Networks
.
Value
1024-bit. RFC 2409.
1536-bit. RFC2409. This is the highest level of
security and requires more processing time than
group 1 and group 2.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To specify the IKE policy to configure, enter:
ike policy <policy-name> <peer-address>
To select the IKE proposal to configure, enter:
proposal <priority>
To configure the encryption algorithm for IKE, enter:
encryption-algorithm {des-cbc | 3des-cbc | aes128-cbc
| aes192-cbc | aes256-cbc}
Value
Specifies DES-CBC encryption.
Specifies 3DES-CBC encryption.
Specifies AES-CBC encryption, with 128-bit key
length.
Specifies AES-CBC encryption, with 192-bit key
length.
Specifies AES-CBC encryption, with 256-bit key
length.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—