beautypg.com

Group [1 | 2 – ADTRAN 5000 Series User Manual

Page 1070

background image

Command Reference Guide

IKE Policy Attributes Command Set

61200990L1-35E

Copyright © 2005 ADTRAN

1070

group [1 | 2]

Use the group command to specify the Diffie-Hellman Group (1 or 2) to be used by this IKE policy to
generate the keys (which are then used to create the IPSec SA).

Syntax Description

1

Specifies 768-bit mod P.

2

Specifies1024-bit mod P.

Default Values

By default, group is set to 1.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 Series units.

Command History

Release 4.1

Command was introduced.

Functional Notes

The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to be
successful.

Usage Examples

The following example sets this IKE policy to use Diffie-Hellman Group 2:

(config-ike)#attribute 10

(config-ike-attribute)#group

2