Cisco NCS 1004 Command Reference Manual page 28

dh
dh
To specify the Diffie-Hellman group for the IKEv2 proposal, use the dh command in IKEv2 proposal
configuration mode.
dh dh-group
Syntax Description
dh-group
None
Command Default
IKEv2 proposal configuration
Command Modes
Command History
Release
Release
7.0.1
Example
The following is a sample in which an IKEv2 proposal is configured.
RP/0/RP0/CPU0:ios#configure
Thu Mar
RP/0/RP0/CPU0:ios(config)#ikev2 proposal proposal1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#encryption aes-cbc-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#integrity sha-1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#prf sha-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#dh 20
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#commit
Thu Mar
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#exit
RP/0/RP0/CPU0:ios(config)#exit
RP/0/RP0/CPU0:ios#show ikev2 proposal proposal1
Thu Mar
Proposal Name
=====================================================================================
Status
-------------------------------------------------------------------------------------
Total Number of Enc. Alg.
Encr. Alg.
-------------------------------------------------------------------------------------
Total Number of Hash. Alg. : 1
Hash. Alg.
-------------------------------------------------------------------------------------
Total Number of PRF. Alg.
PRF. Alg.
-------------------------------------------------------------------------------------
Total Number of DH Group
DH Group
Command Reference for Cisco NCS 1004
22
DH group identifier. The possible values are 19, 20, and 21.
Modification
This command is
introduced.
7 19:19:30.259 UTC
7 19:20:30.916 UTC
7 19:20:48.929 UTC
: proposal1
: Complete
: 1
: CBC-AES-256
: SHA 1
: 1
: SHA 256
: 1
: Group 20
Commands