2160 CHAPTER 141: IKE CONFIGURATION COMMANDS

dpd

Syntax

dpd dpd-name

 

undo dpd

View

IKE Peer view

Parameter

dpd-name: DPD name, a string of 1 to 15 characters.

Description

Use the dpd command to apply a DPD to an IKE peer.

 

Use the undo dpd command to remove the application.

 

By default, no DPD is applied to an IKE peer.

Example

# Apply DPD dpd1 to IKE peer peer1.

 

<Sysname> system-view

 

[Sysname] ike peer peer1

 

[Sysname-ike-peer-peer1] dpd dpd1

encryption-algorithm

Syntax

encryption-algorithm { 3des-cbc aes-cbc [ key-length] des-cbc }

 

undo encryption-algorithm

View

IKE proposal view

Parameter

3des-cbc: Uses the 3DES algorithm in CBC mode as the encryption algorithm. The

 

3DES algorithm uses 168-bit keys for encryption.

 

aes-cbc: Uses the AES algorithm in CBC mode as the encryption algorithm. The

 

AES algorithm uses 128-bit, 192-bit, or 256-bit keys for encryption.

 

key-length: Key length for the AES algorithm, which can be 128, 192 or 256 bits

 

and is defaulted to 128 bits.

 

des-cbc: Uses the DES algorithm in CBC mode as the encryption algorithm. The

 

DES algorithm uses 56-bit keys for encryption.

Description

Use the encryption-algorithmcommand to specify the encryption algorithm

 

for an IKE proposal.

 

Use the undo encryption-algorithmcommand to restore the default.

 

By default, an IKE proposal uses the 56-bit DES encryption algorithm in CBC

 

mode.

Page 2160
Image 2160
3Com MSR 30, MSR 50 manual Dpd, Undo dpd, Encryption-algorithm 3des-cbc aes-cbc key-length des-cbc