Nortel Secure 4134 Configuration page 156

156 IPsec VPN configuration
Configuring hash algorithm for IPsec proposal for remote access
VPN
Configure the hash algorithm for the remote access IPsec proposal.
Procedure steps
Step
1
2
3
4
5
6
Table 81
Variable definitions
Variable
md5
sha1
null
Configuring lifetime for IPsec proposal for remote access VPN
Configure the lifetime of the remote access IPsec SA. When the SA expires,
it is replaced by a new negotiated SA or terminated.
Procedure steps
Copyright © 2007, Nortel Networks
.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To specify configuration of dynamic IKE policies for remote access,
enter:
dynamic
To specify the remote access IPsec policy to configure, enter:
ipsec policy <name> {modecfg-group | l2tp-group}
To specify the IPsec proposal template to configure, enter:
proposal <1-5>
To configure the hash algorithm, enter:
hash-algorithm {md5-hmac | sha1-hmac | null}
Value
A 128-bit message digest-RFC 1321
Secure Hash Standard: A 160-bit message
digest-NIST,FIPS PUB 180-1
No authentication
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—