Download Print this page

Display Ike Proposal - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

Usage guidelines
A DH group with a higher group number provides higher security but needs more time for processing.
To achieve the best trade-off between processing performance and security, choose a proper
Diffie-Hellman group for your network.
Examples
# Specify the 2048-bit Diffie-Hellman group group1 to be used for key negotiation in IKE phase 1 in
the IKE proposal 1.
<Sysname> system-view
[Sysname] ike proposal 1
[Sysname-ike-proposal-1] dh group14
Related commands

display ike proposal

display ike proposal
Use display ike proposal to display configuration information about all IKE proposals.
Syntax
display ike proposal
Views
Any view
Predefined user roles
network-admin
network-operator
Usage guidelines
This command displays the configuration information about all IKE proposals in descending order of
proposal priorities. If no IKE proposal is configured, this command displays the default IKE proposal.
Examples
# Display the configuration information about all IKE proposals.
<Sysname> display ike proposal
Priority Authentication Authentication Encryption
----------------------------------------------------------------------------
1
RSA-SIG
11
PRE-SHARED-KEY
default
PRE-SHARED-KEY
Table 75 Command output
Field
Priority
Authentication method
method
algorithm
SHA1
SHA1
SHA1
Diffie-Hellman Duration
algorithm
DES-CBC
Group 1
DES-CBC
Group 1
DES-CBC
Group 1
Description
Priority of the IKE proposal
Authentication method used by the IKE proposal.
523
group
(seconds)
5000
50000
86400

Advertisement

loading