Encryption-Algorithm - H3C MSR 20-20 Command Reference Manual

2160 C 141: IKE C
HAPTER
dpd
Syntax
View
Parameter
Description
Example

encryption-algorithm

Syntax
View
Parameter
Description
C
ONFIGURATION OMMANDS
dpd dpd-name
undo dpd
IKE Peer view
dpd-name: DPD name, a string of 1 to 15 characters.
Use the command to apply a DPD to an IKE peer.
dpd
Use the
undo dpd
By default, no DPD is applied to an IKE peer.
# Apply DPD dpd1 to IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] dpd dpd1
encryption-algorithm { 3des-cbc | aes-cbc [ key-length ] | des-cbc }
undo encryption-algorithm
IKE proposal view
3des-cbc: Uses the 3DES algorithm in CBC mode as the encryption algorithm. The
3DES algorithm uses 168-bit keys for encryption.
aes-cbc: Uses the AES algorithm in CBC mode as the encryption algorithm. The
AES algorithm uses 128-bit, 192-bit, or 256-bit keys for encryption.
key-length: Key length for the AES algorithm, which can be 128, 192 or 256 bits
and is defaulted to 128 bits.
des-cbc: Uses the DES algorithm in CBC mode as the encryption algorithm. The
DES algorithm uses 56-bit keys for encryption.
Use the encryption-algorithm
for an IKE proposal.
Use the
undo encryption-algorithm
By default, an IKE proposal uses the 56-bit DES encryption algorithm in CBC
mode.
command to remove the application.
command to specify the encryption algorithm
command to restore the default.