Efficient Networks 107-0001-000 manual Ike ipsec policies set pfs, Negotiation

Chapter 12: IKE/IPsec Commands	Efficient Networks® Router family
	Command Line Interface Guide

ike ipsec policies set pfs

Defines the pfs filtering parameter value for the policy. The pfs parameter specifies the Perfect Forward Secrecy negotiation used for the connection.

If you specify 1 or 2, Perfect Forward Secrecy is performed using the specified Diffie- Hellman group (1 or 2). If you specify none, then Perfect Forward Secrecy is not required for this connection and no Diffie-Hellman group is used to encrypt the keys during rekey. To read more about PFS, see “IKE Management” on page 5-52.

Mgmt Class

Security (R/W)

Input Format

ike ipsec policies set pfs <1 2 none > <policyname>

Parameters

1	Use Diffie-Hellman group 1 for the Perfect Forward Secrecy
	negotiation.
2	Use Diffie-Hellman group 2 for the Perfect Forward Secrecy
	negotiation.
none	Perfect Forward Secrecy negotiation is not required for this
	connection.

<policyname>a Name of the IPsec policy to which the pfs parameter value is added.b

aASCII string

bTo see the policy names, use the ike ipsec policies list command.

Example

-> ike ipsec policies set pfs 2 mypolicy

Response

Command prompt.

Page 12-16 Efficient Networks®