Command Reference Guide

SROS Command Line Interface Reference Guide IKE Policy Attributes Command Set
5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 389
group [1 | 2]
Use the group command to specify the Diffie-Hellman group (1 or 2) to be used by this IKE policy to
generate the keys (which are then used to create the IPSec SA).
Syntax Description
1 768-bit mod P
2 1024-bit mod P
Default Values
By default, group is set to 1.
Command Modes
(config-ike-attribute)# IKE Policy Attribute Configuration Mode
Functional Notes
The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to
be successful.
Usage Examples
The following example sets this IKE policy to use Diffie-Hellman group 2:
(config-ike-attribute)#group
2