Nortel 4134 用户指南
Configuring remote access IPsec policies
155
Configuring encryption algorithm for IPsec proposal for remote
access VPN
access VPN
Configure the encryption algorithm for the remote access IPsec proposal.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify configuration of dynamic IKE policies for remote access,
enter:
enter:
dynamic
4
To specify the remote access IPsec policy to configure, enter:
ipsec policy <name> {modecfg-group | l2tp-group}
5
To specify the IPsec proposal template to configure, enter:
proposal <1-5>
6
To configure the encryption algorithm, enter:
encryption-algorithm {des-cbc | 3des-cbc | aes128-cbc |
aes192-cbc | aes256-cbc | null}
—End—
Table 80
Variable definitions
Variable definitions
Variable
Value
des-cbc
Specifies DES-CBC encryption.
3des-cbc
Specifies 3DES-CBC encryption.
aes128cbc
Specifies AES-CBC encryption, with 128-bit key
length.
length.
aes192cbc
Specifies AES-CBC encryption, with 192-bit key
length.
length.
aes256cbc
Specifies AES-CBC encryption, with 256-bit key
length.
length.
null
Specifies no encryption.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.