HP 12500 Series Configuration Manual page 211

To configure an IKE peer:
Step
1. Enter system view.
2. Create an IKE peer and
enter IKE peer view.
3. Specify the IKE negotiation
mode for phase 1.
4. Specify the IKE proposals for
the IKE peer to reference.
5. Configure a pre-shared key
for pre-shared key
authentication or specify a
PKI domain for digital
signature authentication.
6. Select the ID type for IKE
negotiation phase 1.
7. Configure a name for the
local security gateway.
8. Specify the name of the
remote security gateway.
9. Configure an IP address for
the local gateway.
10. Specify the IP addresses of
the remote gateway.
Command
system-view
ike peer peer-name
exchange-mode main
proposal proposal-number&<1-6>
•
To configure a pre-shared key:
pre-shared-key [ cipher | simple ]
key
•
To specify a PKI domain:
certificate domain domain-name
id-type { ip | name | user-fqdn }
local-name name
remote-name name
local-address ip-address
remote-address { hostname |
low-ip-address [ high-ip-address ] }
201
Remarks
N/A
N/A
Optional.
The default is main.
Optional.
By default, an IKE peer references
no IKE proposals, and, when
initiating IKE negotiation, it uses
the IKE proposals configured in
system view.
Configure either command
according to the authentication
method for the IKE proposal.
Optional.
By default, the ID type is IP.
Optional.
By default, no name is configured
for the local security gateway in
IKE peer view, and the security
gateway name configured by
using the ike local-name
command is used.
Optional.
The remote gateway name
configured with remote-name
command on the local gateway
must be identical to the local
name configured with the
local-name command on the
peer.
Optional.
By default, it is the primary IP
address of the interface
referencing the security policy.
Optional.
The remote IP address configured
with the remote-address
command on the local gateway
must be identical to the local IP
address configured with the
local-address command on the
peer.