SIP User's Manual 216 Document #: LTRT-68806
Mediant 2000 & TP-1610 & TP-260/UNI
Table 5-44: IKE Table Configuration Parameters
Parameter Name Description
The lifetime parameters (IKEPolicyLifeInSec and IKEPolicyLifeInKB) determine the duration the SA
created in the main mode phase is valid. When the lifetime of the SA expires, it's automatically
renewed by performing the IKE first phase negotiations. To refrain from a situation where the SA
expires, a new SA is negotiated while the old one is still valid. As soon as the new SA is created, it
replaces the old one. This procedure occurs whenever an SA is about to expire.
First to Fourth Proposal
Encryption Type
[IKEPolicyProposalEncryp
tion_X]
Determines the encryption type used in the main mode negotiation for
up to four proposals. X stands for the proposal number (0 to 3).
The valid encryption values are:
 Not Defined (default)
 [1] DES-CBC
 [2] Triple DES-CBC
 [3] AES-CBC
First to Fourth Proposal
Authentication Type
[IKEPolicyProposalAuthen
tication_X]
Determines the authentication protocol used in the main mode
negotiation for up to four proposals.
X stands for the proposal number (0 to 3).
The valid authentication values are:
 Not Defined (default)
 [2] HMAC-SHA1-96)
 [4] HMAC-MD5-96
First to Fourth Proposal DH
Group
[IKEPolicyProposalDHGro
up_X]
Determines the length of the key created by the DH protocol for up to
four proposals.
X stands for the proposal number (0 to 3).
The valid DH Group values are:
 Not Defined (default)
 [0] DH-786-Bit
 [1] DH-1024-Bit
If no IKE methods are defined (Encryption / Authentication / DH Group), the default settings
(shown in the following table) are applied.
Table 5-45: Default IKE First Phase Proposals
Proposal Encryption Authentication DH Group
Proposal 0
3DES SHA1 1024
Proposal 1
3DES MD5 1024
Proposal 2
3DES SHA1 786
Proposal 3
3DES MD5 786
To Next Page
Loading...
Need help?
General