Ike Allowed Transforms - Cisco MDS 9000 Manual

Chapter 22 Troubleshooting IPsec
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Table 22-1
Platform
Microsoft iSCSI initiator,
Microsoft IPsec implementation
on Microsoft Windows 2000
platform
Cisco iSCSI initiator,
Free Swan IPsec implementation
on Linux platform

IKE Allowed Transforms

Table 22-2
Table 22-2
Parameter
Encryption algorithm
Hash algorithm
Authentication method
DH group identifier
OL-9285-05
IPsec and IKE for Windows and Linux
IKE
3DES, SHA-1 or MD5,
DH group 2
3DES, MD5, DH group 1
provides a list of allowed transform combinations for IKE.
IKE Transform Configuration Parameters
Accepted Values
56-bit DES-CBC
168-bit DES (3DES)
128-bit AES
SHA-1 (HMAC variant)
MD5 (HMAC variant)
Preshared keys
RSA signatures in digital
certificates
768-bit DH
1024-bit DH
1536-bit DH
Default Value
3DES
SHA-1
Preshared keys
768-bit DH (1)
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
Overview
IPsec
3DES, SHA-1
3DES, MD5
22-3