R2511-HP MSR Router Series Security Command Reference(V5)

278
Examples
# Create an IKEv2 profile named profile1.
<Sysname> system-view
[Sysname] ikev2 profile profile1
# Configure on-demand IKEv2 DPD and set the interval to 15 seconds.
[Sysname-ikev2-profile-profile1] dpd 15 on-demand
Related commands
• display ikev2 profile
• ikev2 dpd
encryption
Use encryption to specify encryption algorithms for an IKEv2 proposal.
Use undo encryption to restore the default.
Syntax
encryption { 3des-cbc | aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | aes-ctr-128 | aes-ctr-192 |
aes-ctr-256 | camellia-cbc-128 | camellia-cbc-192 | camellia-cbc-256 | des-cbc } *
undo encryption
Default
An IKEv2 proposal has no encryption algorithm.
Views
IKEv2 proposal view
Default command level
2: System level
Parameters
des-cbc: Uses the Data Encryption Standard (DES) in cipher block chaining (CBC) mode, which uses a
56-bit key.
3des-cbc: Uses the triple DES (3DES) in CBC mode, which uses a 168-bit key.
aes-cbc-128: Uses the Advanced Encryption Standard (AES) in CBC mode that uses a 128-bit key.
aes-cbc-192: Uses AES in CBC mode that uses a 192-bit key.
aes-cbc-256: Uses AES in CBC mode that uses a 256-bit key.
aes-ctr-128: Uses AES in counter (CRT) mode that uses a 128-bit key.
aes-ctr-192: Uses AES in CRT mode that uses a 192-bit key.
aes-ctr-256: Uses AES in CRT mode that uses a 256-bit key.
camellia-cbc-128: Uses Camellia in CBC mode that uses a 128-bit key.
camellia-cbc-192: Uses Camellia in CBC mode that uses a 192-bit key.
camellia-cbc-256: Uses Camellia in CBC mode that uses a 256-bit key.