3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide
PKI Displaying and Debugging Commands 449
Example
# Specify the client to authenticate the DVPN server using a pre-shared-key.
[SecBlade_VPN-dvpn-class-abc] authentication-server method pre-share
data algorithm-suite Syntax
data algorithm-suite suite-number
undo data algorithm-suite
View
DVPN policy views
Parameter
suite-number: Algorithm suite number ranging from 1 to 12, whose meanings are
as follows:
0 Without protection
1 DES_MD5_DHGROUP1
2 DES_MD5_DHGROUP2
3 DES_SHA1_DHGROUP1
4 DES_SHA1_DHGROUP2
5 3DES_MD5_DHGROUP1
6 3DES_MD5_DHGROUP2
7 3DES_SHA1_DHGROUP1
8 3DES_SHA1_DHGROUP2
9 AES128_MD5_DHGROUP1
10 AES128_MD5_DHGROUP2
11 AES128_SHA1_DHGROUP1
12 AES128_SHA1_DHGROUP2
Description
Use the data algorithm-suite command to specify the algorithm suite used by
IPsec SAs (security association) to forward data.
Use the undo data algorithm-suite command to revert to the default algorithm
suite.
The default algorithm suite used by IPsec SAs is numbered 1, which stands for DES
(for encryption), MD5 (for authentication), and DH-GROUP1 (for key negotiation).