Ikev2 Proposal Configuration - Lenovo RackSwitch G8264 Command Reference Manual

IKEv2 Proposal Configuration

590
G8264 Command Reference for ENOS 8.4
The following table describes the commands used to configure an IKEv2 proposal.
IKEv2 proposal includes an encryption algorithm (cipher), an authentication
algorithm type and a Diffie‐Hellman (DH) group, which determines the strength
of the key used in the key exchange process. Higher DH group numbers are more
secure but require additional time to compute the key.
Table 320.
IKEv2 Proposal Options
Command Syntax and Usage
ikev2 proposal
Enter IKEv2 proposal mode.
Command mode: Global configuration
encryption {3des|aes­cbc}
Configures IKEv2 encryption mode.
The default value is 3des.
Command mode: IKEv2 proposal
group 24
Configures the DH group.
The default group is 2.
Command mode: IKEv2 proposal
integrity sha1
Configures the IKEv2 authentication algorithm type.
The default value is sha1.
Command mode: IKEv2 proposal
show ikev2 proposal
Displays the current IKEv2 Proposal configuration.
Command mode: All