Skip Navigation Links | |
Exit Print View | |
Oracle Solaris Administration: IP Services Oracle Solaris 11 Information Library |
1. Planning the Network Deployment
2. Considerations When Using IPv6 Addresses
3. Configuring an IPv4 Network
4. Enabling IPv6 on the Network
5. Administering a TCP/IP Network
7. Troubleshooting Network Problems
11. Administering the ISC DHCP Service
12. Configuring and Administering the DHCP Client
13. DHCP Commands and Files (Reference)
14. IP Security Architecture (Overview)
16. IP Security Architecture (Reference)
17. Internet Key Exchange (Overview)
Configuring IKE With Preshared Keys (Task Map)
Configuring IKE With Preshared Keys
How to Configure IKE With Preshared Keys
How to Update IKE for a New Peer System
Configuring IKE With Public Key Certificates (Task Map)
Configuring IKE With Public Key Certificates
How to Configure IKE With Self-Signed Public Key Certificates
How to Configure IKE With Certificates Signed by a CA
How to Generate and Store Public Key Certificates in Hardware
How to Handle a Certificate Revocation List
Configuring IKE for Mobile Systems (Task Map)
Configuring IKE for Mobile Systems
How to Configure IKE for Off-Site Systems
Configuring IKE to Find Attached Hardware
How to Configure IKE to Find the Sun Crypto Accelerator 6000 Board
19. Internet Key Exchange (Reference)
20. IP Filter in Oracle Solaris (Overview)
Part IV Networking Performance
22. Integrated Load Balancer Overview
23. Configuration of Integrated Load Balancer (Tasks)
24. Virtual Router Redundancy Protocol (Overview)
25. VRRP Configuration (Tasks)
26. Implementing Congestion Control
Part V IP Quality of Service (IPQoS)
27. Introducing IPQoS (Overview)
28. Planning for an IPQoS-Enabled Network (Tasks)
29. Creating the IPQoS Configuration File (Tasks)
30. Starting and Maintaining IPQoS (Tasks)
31. Using Flow Accounting and Statistics Gathering (Tasks)
You can view the algorithms and groups that can be used in Phase 1 IKE negotiations.
In this procedure, you determine which Diffie-Hellman groups are available for use in Phase 1 IKE exchanges. You also view the encryption and authentication algorithms that are available for IKE Phase 1 exchanges. The numeric values match the values that are specified for these algorithms by the Internet Assigned Numbers Authority (IANA).
Diffie-Hellman groups set up IKE SAs.
# ikeadm dump groups Value Strength Description 1 66 ietf-ike-grp-modp-768 2 77 ietf-ike-grp-modp-1024 5 91 ietf-ike-grp-modp-1536 14 110 ietf-ike-grp-modp-2048 15 130 ietf-ike-grp-modp-3072 16 150 ietf-ike-grp-modp-4096 17 170 ietf-ike-grp-modp-6144 18 190 ietf-ike-grp-modp-8192 Completed dump of groups
You would use one of these values as the argument to the oakley_group parameter in an IKE Phase 1 transform, as in:
p1_xform { auth_method preshared oakley_group 15 auth_alg sha encr_alg aes }
# ikeadm dump authalgs Value Name 1 md5 2 sha1 4 sha256 5 sha384 6 sha512 Completed dump of authalgs
You would use one of these names as the argument to the auth_alg parameter in an IKE Phase 1 transform, as in:
p1_xform { auth_method preshared oakley_group 15 auth_alg sha256 encr_alg 3des }
# ikeadm dump encralgs Value Name 3 blowfish-cbc 5 3des-cbc 1 des-cbc 7 aes-cbc Completed dump of encralgs
You would use one of these names as the argument to the encr_alg parameter in an IKE Phase 1 transform, as in:
p1_xform { auth_method preshared oakley_group 15 auth_alg sha256 encr_alg aes }
See Also
For tasks to configure IKE rules that require these values, see Configuring IKE (Task Map).