Command Reference Guide

8 ● data algorithm-suite 3Com Router 5000 Family and Router 6000 Family
Command Reference
data algorithm-suite
Purpose Use the data algorithm-suite command to specify the algorithm suite used by
IPSec SA (security association) to forward data.
Use the undo data algorithm-suite command to revert to the default
algorithm suite.
Syntax data algorithm-suite suite-number
undo data algorithm-suite
Parameters suite-number
Algorithm suite number ranging from 1 to 12 and
defaulting to 1, whose meanings are as follows:
■ 0 Without protection
■ 1 DES_MD5_DHGROUP1
■ 2 DES_MD5_DHGROUP2
■ 3 DES_SHA1_DHGROUP1
■ 4 DES_SHA1_DHGROUP2
■ 5 3DES_MD5_DHGROUP1
■ 6 3DES_MD5_DHGROUP2
■ 7 3DES_SHA1_DHGROUP1
■ 8 3DES_SHA1_DHGROUP2
■ 9 AES128_MD5_DHGROUP1
■ 10 AES128_MD5_DHGROUP2
■ 11 AES128_SHA1_DHGROUP1
■ 12 AES128_SHA1_DHGROUP2
Default The default algorithm suite number used by IPSec SA is 1, which stands for DES (for
encryption), MD5 (for authentication), and DHGROUP1 (for key negotiation)..
Example Specify not to encrypt packets, that is, set the algorithm suite number to 0.
[3Com-dvpn-policy-abc] data algorithm-suite 0
View This command can be used in the following views:
■ Dvpn-Policy view