Chapter 9 G Command; Group - Cisco MDS 9124 - Fabric Switch Reference

group

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
group
To configure a Modular Exponentiation (MODP) Diffie-Hellman (DH) group for an IKE protocol policy,
use the group command in IKE policy configuration submode. To revert to the default, use the no form
of the command.
Syntax Description 1
2
5
Defaults 1
Command Modes IKE policy configuration submode.
Command History Release
2.0(x)
Usage Guidelines To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Examples The following example shows how to configure the DH group for the IKE protocol.
switch# config terminal
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# policy 1
switch(config-ike-ipsec-policy)# group 1
Related Commands Command
crypto ike domain ipsec
crypto ike enable
policy
show crypto ike domain ipsec Displays IKE information for the IPsec domain.
Cisco MDS 9000 Family Command Reference
9-2
group {1 | 2 | 5}
no group
Specifies 768-bit MODP DH group.
Specifies 1024-bit MODP DH group.
Specifies 1536-bit MODP DH group.
Modification
This command was introduced.
Description
Enters IKE configuration mode.
Enables the IKE protocol.
Configures IKE policy parameters.
Chapter 9 G Commands
OL-16217-01, Cisco MDS SAN-OS Release 3.x