R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

11
Default level
2: System level
Parameters
group1: Uses the 768-bit Diffie-Hellman group for key negotiation in phase 1
group2: Uses the 1024-bit Diffie-Hellman group for key negotiation in phase 1.
group5: Uses the 1536-bit Diffie-Hellman group for key negotiation in phase 1.
group14: Uses the 2048-bit Diffie-Hellman group for key negotiation in phase 1.
Description
Use the dh command to specify the DH group to be used in key negotiation phase 1 for an IKE proposal.
Use the undo dh command to restore the default.
By default, group1, the 768-bit Diffie-Hellman group, is used.
Related commands: ike proposal and display ike proposal.
Examples
# Specify 768-bit Diffie-Hellman for IKE proposal 10.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] dh group1
display ike dpd
Syntax
display ike dpd [ dpd-name ]
View
Any view
Default level
1: Monitor level
Parameters
dpd-name: DPD name, a string of 1 to 15 characters.
Description
Use the display ike dpd command to display information about Dead Peer Detection (DPD) detectors.
If you do not specify any parameters, the command displays information about all DPD detectors.
Related commands: ike dpd.
Examples
# Display information about all DPD detectors.
<Sysname> display ike dpd
---------------------------
IKE dpd: dpd1
references: 1
interval-time: 10