Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide crypto isakmp policy | 191
Syntax
Usage Guidelines
To define settings for a ISAKMP policy, issue the command crypto isakmp policy <priority> then press Enter.
Parameter Description
policy Configure an IKE policy
<priority> Specify a number from 1 to 10,000 to define a priority level for the policy. The higher the
number, the higher the priority level.
authentication Configure the IKE authentication method.
pre-share Use Pre Shared Keys for IKE authentication. This is the default authentication type.
rsa-sig Use RSA Signatures for IKE authentication.
ecdsa-256 Use ECDSA-256 signatures for IKE authentication.
ecdsa-384 Use ECDSA-384 signatures for IKE authentication.
encryption Configure the IKE encryption algorithm.
3DES Use 168-bit 3DES-CBC encryption algorithm. This is the default encryption value.
AES128 Use 128-bit AES-CBC encryption algorithm.
AES192 Use 192-bit AES-CBC encryption algorithm.
AES256 Use 256-bit AES-CBC encryption algorithm.
DES Use 56-bit DES-CBC encryption algorithm.
group Configure the IKE Diffie Hellman group.
1 Use the 768-bit Diffie Hellman prime modulus group. This is the default group setting.
2 Use the 1024-bit Diffie Hellman prime modulus group.
19 Use the 256-bit random Diffie Hellman ECP modulus group.
20 Use the 384-bit random Diffie Hellman ECP modulus group
hash Configure the IKE hash algorithm
md5 Use MD5 as the hash algorithm.
sha Use SHA-1 as the hash algorithm. This is the default policy algorithm.
SHA1-96 Use SHA1-96 as the hash algorithm.
SHA2-256-128 Use SHA2-256-128 as the hash algorithm.
SHA2-384-192 Use SHA2-384-192 as the hash algorithm.
prf Set one of the following pseudo-random function (PRF) values for an IKEv2 policy:
 PRF-HMAC-MD5 (default)
 PRF-HMAC-SHA1
 PRF-HMAC-SHA256
 PRF-HMAC-SHA384
lifetime <seconds> Specify the lifetime of the IKE security association (SA), from 300 - 86400 seconds.
version Specify the version of IKE protocol for the IKE policy
 v1: IKEv1
 v2: IKEv2