Dell POWEREDGE M1000E User Manual

Page 522

494

Fabric OS Command Reference

53-1002746-01

ipSecConfig

switch:admin> ipsecconfig --help modify policy ike
Usage: ipsecConfig --modify policy ike ARGUMENTS

ARGUMENTS
-tag ike policy name
-remote peers ipaddress
-id local identifier
-remoteid peers identifier
-enc encryption algorithm
-hash hash algorithm
-prf prf algorithm
-dh dh group number

ENCRYPTION ALGORITHM
3des_cbc, aes128_cbc, aes256_cbc, null_enc

HASH ALGORITHM
hmac_md5, hmac_sha1, aes_xcbc

PRF ALGORITHM
hmac_md5, hmac_sha1, aes_xcbc

DH-GROUP
modp768(1), modp1024(2), modp2048(14), modp8192(18)

REFERENCES

•

[DISR] "DOD IPv6 Standards Profiles for IPv6 Capable Products", v2.0 (6/15/2007).

•

[NIST] "A Profile for IPv6 in the U.S. Government", v1.0 (1/31/2007).

•

[4301] Kent, S. and K. Seo, "Security Architecture for the Internet Protocol", RFC 4301 (Dec 2005).

•

[4302] Kent, S., "IP Authentication Header", RFC4302 (Dec 2005).

•

[4303] Kent, S., "IP Encapsulating Security Payload (ESP)", RFC4303 (Dec 2005).

•

[4306] Kaufman, C., Ed., "The Internet Key Exchange (IKEv2) Protocol", RFC 4306 (Dec 2005).