Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 176

JunosE 11.3.x IP Services Configuration Guide
encryption
group
hash
ipsec ike-policy-rule
ipsec isakmp-policy-rule
150
Use to specify one of the following encryption algorithms to use in the IKE policy:
3des—168-bit 3DES-CBC
des—56-bit DES-CBC
Example
host1(config-ike-policy)#encryption 3des
Use the no version to restore the default encryption algorithm, 3DES.
See encryption.
Use to assign a Diffie-Hellman group to the IKE policy. Specify:
1—768-bit group
2—1024-bit group
5—1536-bit group
Example
host1(config-ike-policy)#group 5
Use the no version to restore the default.
See group.
Use to set the hash algorithm for the IKE policy:
md5—MD5 (HMAC variant)
sha—SHA-1 (HMAC variant)
Example
host1(config-ike-policy)#hash md5
Use the no version to restore the default, sha.
See hash.
NOTE: The command replaces the ipsec isakmp-policy-rule command,
which may be removed completely in a future release.
Copyright © 2010, Juniper Networks, Inc.