Huawei quidway s7700 Configuration Manual page 133

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ike peer peer-name { v1 | v2 }
An IKE peer is created and the IKE peer view is displayed.
Step 3 Run:
exchange-mode { main | aggressive }
The IKE negotiation mode is configured.
In aggressive mode, the local ID type must be set to ip or name in step 5. In main mode, the
local ID type must be set to ip.
Step 4 Run:
ike-proposal proposal-number
An IKE proposal is configured.
Step 5 (Optional) Run:
local-id-type { ip | name }
The local ID type is configured.
By default, the IP address of the local end is used as the local ID.
Step 6 (Optional) Run:
local-address address
The IP address of the local end in IKE negotiation is configured.
By default, the local end address is the IP address of the interface bound to the IPSec policy.
Step 7 (Optional) Run:
ike local-name local-name
The local host name used in the IKE negotiation is configured.
After the local ID type is set to name, you need to set the local host name.
The local host name and the remote host name configured when you configure an IKE peer are
both case sensitive.
Step 8 (Optional) Run:
peer-id-type { ip | name }
The Peer ID type is configured.
By default, the IP address of the local end is used as the local ID.
The peer-id-type command is valid only when IKEv2 is used.
Step 9 (Optional) Run:
nat traversal
NAT traversal is enabled.
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 IPSec Configuration
122