Encryption - Cisco NCS 1004 Command Reference Manual

encryption

encryption
To specify the transform types for encryption, use the encryption command in the IKEv2 proposal configuration
mode.
encryption encryption-type
Syntax Description
encryption-type
None
Command Default
IKEv2 proposal configuration
Command Modes
Command History
Release
Release
7.0.1
Example
The following is a sample in which an IKEv2 proposal is configured.
RP/0/RP0/CPU0:ios#configure
Thu Mar
RP/0/RP0/CPU0:ios(config)#ikev2 proposal proposal1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#encryption aes-cbc-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#integrity sha-1
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#prf sha-256
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#dh 20
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#commit
Thu Mar
RP/0/RP0/CPU0:ios(config-ikev2-proposal-proposal1)#exit
RP/0/RP0/CPU0:ios(config)#exit
RP/0/RP0/CPU0:ios#show ikev2 proposal proposal1
Thu Mar
Proposal Name
=====================================================================================
Status
-------------------------------------------------------------------------------------
Total Number of Enc. Alg.
Encr. Alg.
-------------------------------------------------------------------------------------
Total Number of Hash. Alg. : 1
Hash. Alg.
-------------------------------------------------------------------------------------
Total Number of PRF. Alg.
PRF. Alg.
-------------------------------------------------------------------------------------
Total Number of DH Group
DH Group
Command Reference for Cisco NCS 1004
24
Encrytion algorithm. The possible values are aes-gcm-256, aes-gcm-128, aes-cbc-256,
aes-cbc-192, and aes-cbc-128.
Modification
This command is
introduced.
7 19:19:30.259 UTC
7 19:20:30.916 UTC
7 19:20:48.929 UTC
: proposal1
: Complete
: 1
: CBC-AES-256
: SHA 1
: 1
: SHA 256
: 1
: Group 20
Commands