Command Reference Guide

494 Fabric OS Command Reference
53-1002746-01
ipSecConfig
2
switch:admin> ipsecconfig --help modify policy ike
Usage: ipsecConfig --modify policy ike ARGUMENTS
ARGUMENTS
-tag <name> ike policy name
-remote <addr> peers ipaddress
-id <identifier> local identifier
-remoteid <identifier> peers identifier
-enc <ALGORITHM> encryption algorithm
-hash <ALGORITHM> hash algorithm
-prf <ALGORITHM> prf algorithm
-dh <number> dh group number
ENCRYPTION ALGORITHM
3des_cbc, aes128_cbc, aes256_cbc, null_enc
HASH ALGORITHM
hmac_md5, hmac_sha1, aes_xcbc
PRF ALGORITHM
hmac_md5, hmac_sha1, aes_xcbc
DH-GROUP
modp768(1), modp1024(2), modp2048(14), modp8192(18)
REFERENCES • [DISR] "DOD IPv6 Standards Profiles for IPv6 Capable Products", v2.0 (6/15/2007).
• [NIST] "A Profile for IPv6 in the U.S. Government", v1.0 (1/31/2007).
• [4301] Kent, S. and K. Seo, "Security Architecture for the Internet Protocol", RFC 4301 (Dec 2005).
• [4302] Kent, S., "IP Authentication Header", RFC4302 (Dec 2005).
• [4303] Kent, S., "IP Encapsulating Security Payload (ESP)", RFC4303 (Dec 2005).
• [4306] Kaufman, C., Ed., "The Internet Key Exchange (IKEv2) Protocol", RFC 4306 (Dec 2005).
SEE ALSO None