网络互联PPT情境5网络安全技术_3IPSec VPN.ppt

* * * * ISAKMP commands: authentication Set authentication method for protection suite default Set a command to its defaults encryption Set encryption algorithm for protection suite exit Exit from ISAKMP configuration mode group Set the Diffie-Hellman group hash Set hash algorithm for protection suite lifetime Set lifetime for ISAKMP security association no Negate a command or set its defaults Syntax Description authentication {rsa-sig | rsa-encr | pre-share} rsa-sig Specifies RSA signatures as the authentication method. rsa-encr Specifies RSA encrypted nonces as the authentication method. pre-share Specifies pre-shared keys as the authentication method. encryption des des Specifies 56-bit DES-CBC as the encryption algorithm. * Syntax Description (con’t) hash {sha | md5} sha Specifies SHA-1 (HMAC variant) as the hash algorithm. md5 Specifies MD5 (HMAC variant) as the hash algorithm. group {1 | 2} 1 Specifies the 768-bit Diffie-Hellman group. 2 Specifies the 1024-bit Diffie-Hellman group. lifetime seconds seconds Specifies how many seconds each SA should exist before expiring. Use an integer from 60 to 86,400 seconds. Default encryption (IKE policy); default = 56-bit DES-CBC hash (IKE policy); default = SHA-1 authentication (IKE policy); default = RSA signatures group (IKE policy); default = 768-bit Diffie-Hellman lifetime (IKE policy); default = 86,400 seconds (one day) * * Syntax Description keystring Specify the pre-shared key. Use any combination of alphanumeric characters up to 128 bytes. This pre-shared key must be identical at both peers. peer-address. Specify the IP address of the remote peer. hostname Specify the host name of the remote peer. This is the peer's host name concatenated with its domain name (for example