Cisco MDS 9000 Series Command Reference

Send documentation comments to mdsfeedback-doc@cisco.com
9-2
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 9 G Commands
group
group
To configure a Modular Exponentiation (MODP) Diffie-Hellman (DH) group for an IKE protocol policy,
use the group command in IKE policy configuration submode. To revert to the default, use the no form
of the command.
group {1 | 2 | 5}
no group
Syntax Description
Defaults 1
Command Modes IKE policy configuration submode.
Command History
Usage Guidelines To use this command, the IKE protocol must be enabled using the crypto ike enable command.
Examples The following example shows how to configure the DH group for the IKE protocol.
switch# config terminal
switch(config)# crypto ike domain ipsec
switch(config-ike-ipsec)# policy 1
switch(config-ike-ipsec-policy)# group 1
Related Commands
1 Specifies 768-bit MODP DH group.
2 Specifies 1024-bit MODP DH group.
5 Specifies 1536-bit MODP DH group.
Release Modification
2.0(x) This command was introduced.
Command Description
crypto ike domain ipsec Enters IKE configuration mode.
crypto ike enable Enables the IKE protocol.
policy Configures IKE policy parameters.
show crypto ike domain ipsec Displays IKE information for the IPsec domain.

Cisco MDS 9000 Series Specifications

General

Brand	Cisco
Model	MDS 9000 Series
Category	Switch
Language	English