Nortel 4134 用户指南
148
IPsec VPN configuration
4
To specify the remote access IKE policy to configure, enter:
ike policy <policy-name> {modecfg-group | l2tp-group}
5
To specify the IKE proposal, enter:
proposal <1-5>
6
To configure DH group for IKE proposal
dh-group {group1 | group2 | group5}
—End—
Table 72
Variable definitions
Variable definitions
Variable
Value
group1
768-bit. RFC 2409.
group2
1024-bit. RFC 2409.
group5
1536-bit. RFC2409. This is the highest level of
security and requires more processing time than
group 1 and group 2.
security and requires more processing time than
group 1 and group 2.
Configuring encryption algorithm for IKE proposal for remote
access VPN
access VPN
Configure the encryption algorithm for the remote access IKE proposal.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify configuration of remote access IKE policies, enter:
dynamic
4
To specify the remote access IKE policy to configure, enter:
ike policy <policy-name> {modecfg-group | l2tp-group}
5
To specify the IKE proposal, enter:
proposal <1-5>
6
To configure the encryption algorithm for IKE:
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.