Windows Suite B Support with IKEv1 » History » Version 2
Andreas Steffen, 08.07.2009 09:38
extended suite B howtow
1 | 1 | Andreas Steffen | h1. Windows Suite B Support |
---|---|---|---|
2 | 1 | Andreas Steffen | |
3 | 2 | Andreas Steffen | Windows Vista Service Pack 1, Windows Server 2008 and Windows 7 support the cryptographic algorithms for IPsec defined by Suite B. For details see http://support.microsoft.com/kb/949856/. |
4 | 2 | Andreas Steffen | |
5 | 2 | Andreas Steffen | The following command sets the IKEv1 main mode algorithms: |
6 | 2 | Andreas Steffen | |
7 | 1 | Andreas Steffen | <pre> |
8 | 1 | Andreas Steffen | netsh advfirewall set global mainmode mmsecmethods ecdhp256:aes128-sha256,ecdhp384:aes192-sha384,dhgroup14:aes128-sha1 |
9 | 1 | Andreas Steffen | </pre> |
10 | 2 | Andreas Steffen | |
11 | 2 | Andreas Steffen | The currently configured algorithms can be checked using the command: |
12 | 1 | Andreas Steffen | |
13 | 1 | Andreas Steffen | <pre> |
14 | 1 | Andreas Steffen | netsh advfirewall show global |
15 | 1 | Andreas Steffen | |
16 | 1 | Andreas Steffen | Main Mode: |
17 | 1 | Andreas Steffen | KeyLifetime 480min,0sess |
18 | 1 | Andreas Steffen | SecMethods ECDHP256-AES128-SHA256,ECDHP384-AES192-SHA384,DHGroup14-AES128-SHA1 |
19 | 1 | Andreas Steffen | ForceDH No |
20 | 1 | Andreas Steffen | </pre> |