HP 7000 dl Router manual Group 1

SROS Command Line Interface Reference Guide IKE Policy Attributes Command Set

group [1 2]

Use the group command to specify the Diffie-Hellman group (1 or 2) to be used by this IKE policy to generate the keys (which are then used to create the IPSec SA).

Syntax Description

1	768-bit mod P
2	1024-bit mod P

Default Values

By default, group is set to 1.

Command Modes

(config-ike-attribute)# IKE Policy Attribute Configuration Mode

Functional Notes

The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to be successful.

Usage Examples

The following example sets this IKE policy to use Diffie-Hellman group 2:

(config-ike-attribute)#group 2

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 389