Ikev2 Proposal - HP FlexNetwork MSR Series Command Reference Manual

Usage guidelines
An IKEv2 profile contains the IKEv2 SA parameters that are not negotiated, such as the identity
information and authentication methods of the peers, and the matching criteria for profile lookup.
Examples
# Create an IKEv2 profile named profile1 and enter IKEv2 profile view.
<Sysname> system-view
[Sysname] ikev2 profile profile1
[Sysname-ikev2-profile-profile1]
Related commands
display ikev2 profile

ikev2 proposal

Use ikev2 proposal to create an IKEv2 proposal and enter its view, or enter the view of an existing
IKEv2 proposal.
Use undo ikev2 proposal to delete an IKEv2 proposal.
Syntax
ikev2 proposal proposal-name
undo ikev2 proposal proposal-name
Default
An IKEv2 proposal named default exists, which has the lowest priority and uses the following
settings:
•
In non-FIPS mode:
Encryption algorithm—AES-CBC-128 and 3DES.

Integrity protection algorithm—HMAC-SHA1 and HMAC-MD5.

PRF algorithm—HMAC-SHA1 and HMAC-MD5.

DH group—Group 5 and group 2.

•
In FIPS mode:
Encryption algorithm—AES-CBC-128 and AES-CTR-128.

Integrity protection algorithm—HMAC-SHA1 and HMAC-SHA256.

PRF algorithm—HMAC-SHA1 and HMAC-SHA256.

DH group—Group 14 and group 19.

Views
System view
Predefined user roles
network-admin
Parameters
proposal-name: Specifies a name for the IKEv2 proposal. The proposal name is a case-insensitive
string of 1 to 63 characters and cannot be default.
Usage guidelines
An IKEv2 proposal contains security parameters used in IKE_SA_INIT exchanges, including the
encryption algorithms, integrity protection algorithms, PRF algorithms, and DH groups.
578