Group [1 | 2 – ADTRAN 1000R Series User Manual

Page 1257

Advertising
background image

Command Reference Guide

IKE Policy Attributes Command Set

61200510L1-35E

Copyright © 2005 ADTRAN

1257

group [1 | 2]

Use the group command to specify the Diffie-Hellman Group (1 or 2) to be used by this IKE policy to
generate the keys (which are then used to create the IPSec SA).

Syntax Description

1

Specifies 768-bit mod P.

2

Specifies1024-bit mod P.

Default Values

By default, group is set to 1.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 Series units.

Command History

Release 4.1

Command was introduced.

Functional Notes

The local IKE policy and the peer IKE policy must have matching group settings in order for negotiation to be
successful.

Usage Examples

The following example sets this IKE policy to use Diffie-Hellman Group 2:

(config-ike)#attribute 10

(config-ike-attribute)#group

2

Advertising