Table of Contents
Advertisement
Command Reference Guide
group
Use the group command to specify the Diffie-Hellman Group (1, 2, or 5) to be used by this Internet key
exchange (IKE) policy to generate the keys (which are then used to create the IPSec security association
(SA)). Use the no form of this command to return to the default setting. Variations of this command
include:
group 1
group 2
group 5
Syntax Description
1
2
5
Default Values
By default, group is set to 1.
Command History
Release 4.1
Release 15.1
Functional Notes
The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to
be successful.
Usage Examples
The following example sets this IKE policy to use Diffie-Hellman Group 2:
(config-ike)#attribute 10
(config-ike-attribute)#group 2
60000CRG0-35E
Requires the IKE policy to use Diffie-Hellman Group 1 (768-bit modulus)
exchange during IPSec SA key generation.
Requires the IKE policy to use Diffie-Hellman Group 2 (1024-bit modulus)
exchange during IPSec SA key generation.
Requires the IKE policy to use Diffie-Hellman Group 5 (1536-bit modulus)
exchange during IPSec SA key generation.
Command was introduced.
Command was expanded to include the group 5 parameter.
Copyright © 2012 ADTRAN, Inc.
IKE Policy Attributes Command Set
3951
Advertisement
Table of Contents
