security vpn ipsec ike-group <name> proposal <num> dh-group <group>
Specifies the group to be proposed for Diffie-Hellman key exchanges.
- name
- The name to be used to refer to the IKE configuration.
- proposal
- An integer uniquely identifying an IKE proposal.
- pfs
- The Diffie-Hellman group used for key exchanges. Supported values are as follows:
2—Group 2.
5—Group 5.
14—Group 14.
15—Group 15.
16—Group 16.
17—Group 17.
18—Group 18.
19—Group 19.
20—Group 20.
Configuration mode
security {
vpn {
ipsec {
ike-group name {
proposal num {
dh-group group
}
}
}
}
}Use this command to specify the Diffie-Hellman group used for key exchanges.
Use the set form of this command to specify the Diffie-Hellman group used for key exchanges.
Use the delete form of this command to revert to the default group.
Use the show form of this command to view the group configuration.