2155

group5: Uses the 1536-bit Diffie-Hellman group for key negotiation in phase 1.

group14: Uses the 2048-bit Diffie-Hellman group for key negotiation in phase 1.

Description Use the dh command to specify the DH group to be used in key negotiation phase 1 for an IKE proposal.

Use the undo dh command to restore the default.

By default, group1, the 768-bit Diffie-Hellman group, is used.

Related command: ike proposal, display ike proposal.

Example # Specify 768-bit Diffie-Hellman for IKE proposal 10.

<Sysname> system-view

[Sysname] ike proposal 10

[Sysname-ike-proposal-10] dh group1

display ike dpd

Syntax display ike dpd [ dpd-name]

View Any view

Parameter dpd-name: DPD name, a string of 1 to 15 characters.

Description Use the display ike dpd command to display information about a specified or all DPDs.

Related command: ike dpd.

Example # Display information about all DPDs.

<Sysname> display ike dpd

---------------------------

IKE dpd: dpd1

references: 1

interval-time: 10

time_out: 5

---------------------------

Table 569 Description on the fields of the display ike dpd command

Field

Description

 

 

references

Number of IKE peers referencing the DPD

Interval-time

DPD query triggering interval in seconds

time_out

DPD packet retransmission interval in seconds

 

 

Page 2155
Image 2155
3Com MSR 50 Display ike dpd, Example # Specify 768-bit Diffie-Hellman for IKE proposal, Syntax display ike dpd dpd-name