Certificate Domain - HPE FlexNetwork HSR6800 Security Command Reference

Views
IKE proposal view
Default command level
2: System level
Parameters
pre-share: Uses the pre-shared key method.
rsa-signature: Uses the RSA digital signature method.
Examples
# Specify that IKE proposal 10 uses the pre-shared key authentication method.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] authentication-method pre-share
Related commands
•
ike proposal
•
display ike proposal

certificate domain

Use certificate domain to configure the PKI domain of the certificate when IKE uses digital
signature as the authentication mode.
Use undo certificate domain to remove the configuration.
Syntax
certificate domain domain-name
undo certificate domain
Views
IKE peer view
Default command level
2: System level
Parameters
domain-name: Specifies the name of the PKI domain, a string of 1 to 15 characters.
Examples
# Configure the PKI domain as abcde for IKE negotiation.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] certificate domain abcde
Related commands
•
authentication-method
•
pki domain
dh
Use dh to specify the DH group to be used in key negotiation phase 1 for an IKE proposal.
303