Concept Guide

crypto isakmp policy
crypto isakmp policy
authentication pre-share|rsa-sig|ecdsa-256|ecdsa-384
disable|enable [bypass|secret]
encryption 3DES|AES128|AES192|AES256|DES
group 1|2|14|19|20
hash md5|sha|sha1-96|sha2-256-128|sha2-384-192
prf PRF-HMAC-MD5|PRF-HMAC-SHA1|PRF-HMAC-SHA256|PRF-HMAC-SHA384
lifetime <seconds>
no disable
version v1|v2
Description
This command configures Internet Key Exchange (IKE) policy parameters for the Internet Security Association
and Key Management Protocol (ISAKMP).
Syntax
Parameter Description
policy
Configure an IKE policy
<priority>
Specify a number from 1 to 10,000 to define a priority level for the policy. The
higher the number, the higher the priority level.
authentication
Configure the IKE authentication method.
pre-share
Use Pre Shared Keys for IKE authentication. This is the default authentication
type.
rsa-sig
Use RSA Signatures for IKE authentication.
ecdsa-256
Use ECDSA-256 signatures for IKE authentication.
ecdsa-384
Use ECDSA-384 signatures for IKE authentication.
disable
Disables the IKE policy.
enable
[bypass|secret]
Enables the IKE policy using the bypass or secret. Bypass prompts for the enable
mode login and password. Secret prompts for the enable password.
encryption
Configure the IKE encryption algorithm.
3DES
Use 168-bit 3DES-CBC encryption algorithm. This is the default encryption
value.
AES128
Use 128-bit AES-CBC encryption algorithm.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide crypto isakmp policy | 309