group
To configure a Modular Exponentiation (MODP) Diffie-Hellman (DH) group for an IKE protocol policy, use the group command in IKE policy configuration submode. To revert to the default, use the no form of the command.
group {1 | 2 | 5}
no group
Syntax Description
1 |
Specifies 768-bit MODP DH group. |
2 |
Specifies 1024-bit MODP DH group. |
5 |
Specifies 1536-bit MODP DH group. |
Command Default
1.
Command Modes
IKE policy configuration submode.
Command History
Release |
Modification |
---|---|
2.0(x) |
This command was introduced. |
Usage Guidelines
To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Examples
The following example shows how to configure the DH group for the IKE protocol:
switch# config terminal
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# policy 1
switch(config-ike-ipsec-policy)# group 1