hash (IKE policy)
To specify the hash algorithm within an Internet Key Exchange policy, use the hash command in Internet Security Association Key Management Protocol (ISAKMP) policy configuration mode. IKE policies define a set of parameters to be used during IKE negotiation. To reset the hash algorithm to the defaultsecure hash algorithm (SHA)-1 hash algorithm, use the no form of this command.
hash {sha | sha256 | sha384 | md5}
no hash
Syntax Description
sha | Specifies SHA-1 (HMAC variant) as the hash algorithm. |
sha256 | Specifies SHA-2 family 256-bit (HMAC variant) as the hash algorithm. |
sha384 | Specifies SHA-2 family 384-bit (HMAC variant) as the hash algorithm. |
md5 | Specifies MD5 (HMAC variant) as the hash algorithm. |
Defaults
The SHA-1 hash algorithm
Command Modes
ISAKMP policy configuration
Command History
Release | Modification |
|---|
11.3 T | This command was introduced. |
12.4(4)T | IPv6 support was added. |
12.2(33)SRA | This command was integrated into Cisco IOS release 12.(33)SRA. |
12.2SX | This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware. |
Cisco IOS XE Release 2.1 | This command was introduced on Cisco ASR 1000 Series Routers. |
15.1(2)T | This command was modified. The sha256 and sha384 keywords were added. |
Of course, it depends slightly on your IOS.
HTH,
Ian
