In this example, you create a proposal called ipsec_prop_1, specify ESP as the security protocol, and set hmac-md5-96 as the authentication algorithy and 3des-cbc as the encryption algorithm. You also specify that the security association (SA) terminate after 1,800 KBof data pass through it.
- user@host# set security ipsec proposal ipsec_prop_1
description "new ipsec proposal"
- user@host# set security ipsec proposal ipsec_prop_1
protocol esp
- user@host# set security ipsec proposal ipsec_prop_1
authentication-algorithm hmac-md5-96
- user@host# set security ipsec proposal ipsec_prop_1
encryption-algorithm 3des-cbc
- user@host# set security ipsec proposal ipsec_prop_1
lifetime-seconds 1800
Use the following command to display information about this IKE proposal:
- user@host# show security ipsec proposal ipsec_prop_1