Листовка для Cisco Cisco Packet Data Gateway (PDG)
IKEv2 RFC 5996 Compliance
▀ CLI Commands
▄ Cisco StarOS IP Security (IPSec) Reference
160
Disable Change in Rekey Parameters in CHILDSA REKEY
Disabling of rekey parameters must be enabled in a crypto map or crypto template.
For a crypto map the configuration sequence is:
configure
context <ctxt_name>
crypto map template_name { ikev2-ipv4 | ikev2-ipv6 }
ikev2-ikesa
rekey disallow-param-change
For a crypto template the configuration sequence is:
configure
context <ctxt_name>
crypto template template_name ikev2-dynamic
ikev2-ikesa
rekey disallow-param-change
Refer to the Command Line Interface Reference for a complete description of these commands and their keywords.
show commands
The following show commands display configuration parameters associated with support of RFC 5996:
Statistics for notification payloads
show crypto statistics ikev2
show crypto ikev2-ikesa security-associations
show crypto statistics ikev2
Send and receive statistics for hash-url encrypted certificates
show crypto statistics ikev2
RFC 5996 configuration options
show configuration