Enterasys Networks X-Pedition XSR CLI - Manual (Page 551)

ISAKMP Protocol Policy Mode Commands
XSR CLI Reference Guide 14-97
encryption
This command sets the encryption algorithm used in an IKE proposal (policy).
Syntax
encryption {des | 3des | aes}
Syntax of the “no” Form
The no form of this commands resets the algorithm to the default:
no encryption
Default
3DES
Mode
ISAKMP protocol proposal configuration: XSR(config-isakmp)#
Example
This example specifies 3DES as the encryption method for the IKE proposal ACMEproposal:
XSR(config)#crypto isakmp proposal ACMEproposal
XSR(config-isakmp)#encryption 3des
group
This command sets the Diffie‐Hellman group in an IKE proposal (policy).
Syntax
group {1 | 2 | 5}
des Data Encryption Standard (DES) encryption.
3des Triple Data Encryption Standard (3DES) encryption.
aes Advanced Encryption Standard (AES) encryption.
Note: Due to the lack of an IETF standard, IKE Diffie-Helman bit groups 2048, 3072, and 4096 are
not enabled.
1 768‐bit Diffie‐Hellman group.
2 1024‐bit Diffie‐Hellman group.
5 1536‐bit Diffie‐Hellman group.