TMS zl Management and Configuration Guide ST.1.2.100916

A-126
Command-Line Reference
IKEv1 Context
*Local ID
Type: IP Address
Value: 10.10.50.54
*Remote ID
Type: Domain Name
Value: gateway.company123.com
*IKE Authentication
Key Exchange Mode: Main Mode
Authentication Method: DSA Signature
Security Parameters Proposal
Diffie-Hellman (DH) Group: Group 1 (768)
Encryption Algorithm: 3DES
Authentication Algorithm: MD5
SA Lifetime in Seconds: 28800
XAUTH Configuration
XAUTH: disabled
security-proposal
To configure the security settings proposed by the TMS zl Module for the IKE
SA, enter the following command:
Syntax: security-proposal dh-group <group type> encryption <encryption algorithm>
auth <authentication algorithm> sa-lifetime <seconds>
Replace <group type> with one of the following Diffie-Hellman groups:
■ group1-768
■ group2-1024
■ group5-1536
Replace <encryption algorithm> with one of the following encryption
algorithms:
■ des
■ 3des
■ aes-128
■ aes-192
■ aes-256
Replace <authentication algorithm> with one of the following authentica-
tion algorithms: