ISAKMP Protocol Policy Mode Commands
XSR CLI Reference Guide 14-97
encryption
ThiscommandsetstheencryptionalgorithmusedinanIKEproposal(policy).
Syntax
encryption {des | 3des | aes}
Syntax of the “no” Form
Thenoformofthiscommandsresetsthealgorithmtothedefault:
no encryption
Default
3DES
Mode
ISAKMPprotocolproposalconfiguration:XSR(config-isakmp)#
Example
Thisexamplespecifies3DESastheencryptionmethodfortheIKEproposalACMEproposal:
XSR(config)#crypto isakmp proposal ACMEproposal
XSR(config-isakmp)#encryption 3des
group
ThiscommandsetstheDiffie‐HellmangroupinanIKEproposal(pol icy).
Syntax
group {1 | 2 | 5}
des
DataEncryptionStandard(DES)encryption.
3des
TripleDataEncryptionStandard(3DES)encryption.
aes
AdvancedEncryptionStandard(AES)encryption.
Note: Due to the lack of an IETF standard, IKE Diffie-Helman bit groups 2048, 3072, and 4096 are
not enabled.
1
768‐bitDiffie‐Hellmangroup.
2
1024‐bitDiffie‐Hellmangroup.
5
1536‐bitDiffie‐Hellmangroup.