Reference Guide

Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide crypto isakmp policy | 162
crypto isakmp policy
crypto isakmp policy
authentication pre-share|rsa-sig
encryption 3DES|AES128|AES192|AES256|DES
group 1|2
hash md5|sha
lifetime <seconds>
Description
This command configures Internet Key Exchange (IKE) policy parameters for the Internet Security Association
and Key Management Protocol (ISAKMP).
Syntax
Usage Guidelines
To define settings for a ISAKMP policy, issue the command crypto isakmp policy <priority> then press Enter.
The CLI will enter config-isakmp mode, which allows you to configure the policy authentication, encryption,
group, hash algorithm and lifetime values.
Parameter Description
policy Configure an IKE policy
<priority> Specify a number from 1 to 10,000 to define a priority level for the policy. The higher the
number, the higher the priority level.
authentication Configure the IKE authentication method.
pre-share Use Pre Shared Keys for IKE authentication. This is the default authentication type.
rsa-sig Use RSA Signatures for IKE authentication.
encryption Configure the IKE encryption algorithm.
3DES Use 168-bit 3DES-CBC encryption algorithm. This is the default encryption value.
AES128 Use 128-bit AES-CBC encryption algorithm.
AES192 Use 192-bit AES-CBC encryption algorithm.
AES256 Use 256-bit AES-CBC encryption algorithm.
DES Use 56-bit DES-CBC encryption algorithm.
group Configure the IKE Diffie Hellman group.
1 Use the 768-bit Diffie Hellman prime modulus group.
2 Use the 1024-bit Diffie Hellman prime modulus group. This is the default group setting.
hash Configure the IKE hash algorithm
md5 Use MD5 (HMAC variant) as the hash algorithm.
sha Use SHA-1 (HMAC variant) as the hash algorithm. This is the default policy algorithm.
lifetime <seconds> Specify the lifetime of the IKE security association (SA), from 300 - 86400 seconds.