Huawei AR1200 series Configuration Manual page 320

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
8.
9.
10. (Optional) Run:
11. (Optional) Run:
12. Run:
13. Run:
14. Run:
15. Run:
16. Run:
17. Run:
18. Run:
Issue 01 (2012-04-20)
(Optional) Run:
dns ip-address secondary
The IP address of the secondary DNS server is specified.
Run:
ip-pool pool-name [ move-to new-position ]
The location of the IP address pool is specified in the AAA service scheme.
wins ip-address
The IP address of the primary WINS server is specified.
wins ip-address secondary
The IP address of the secondary WINS server is specified.
quit
The AAA view is displayed.
quit
The system view is displayed.
ike-proposal proposal-number
An IKE proposal is configured.
For details, see 5.4.3 (Optional) Configuring an IKE
NOTE
The DH group used in IKE negotiation must be set to dh group2 for an efficient-vpn policy.
quit
The system view is displayed.
ike peer peer-name { v1 | v2 }
An IKE peer is configured.
For details, see 5.4.4 Configuring an IKE
NOTE
l When the IKE v1 version is used, the aggressive mode must be enabled using exchange-mode.
l Run the service-scheme command to bind the IKE peer to the AAA service scheme.
quit
The system view is displayed.
ipsec proposal proposal-name
An IPSec proposal is configured.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Proposal.
Peer.
5 IPSec Configuration
309