2155
group5: Uses the 1536-bit Diffie-Hellman group for key negotiation in phase 1.
group14: Uses the 2048-bit Diffie-Hellman group for key negotiation in phase 1.
Description Use the
dh command to specify the DH group to be used in key negotiation phase
1 for an IKE proposal.
Use the
undo dh command to restore the default.
By default, group1, the 768-bit Diffie-Hellman group, is used.
Related command: ike proposal, display ike proposal.
Example # Specify 768-bit Diffie-Hellman for IKE proposal 10.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] dh group1
display ike dpd
Syntax display ike dpd [ dpd-name ]
View Any view
Parameter dpd-name: DPD name, a string of 1 to 15 characters.
Description Use the
display ike dpd command to display information about a specified or all
DPDs.
Related command: ike dpd.
Example # Display information about all DPDs.
<Sysname> display ike dpd
---------------------------
IKE dpd: dpd1
references: 1
interval-time: 10
time_out: 5
---------------------------
Table 569 Description on the fields of the display ike dpd command
Field Description
references Number of IKE peers referencing the DPD
Interval-time DPD query triggering interval in seconds
time_out DPD packet retransmission interval in seconds