Profile (Gdoi Ks Group Ipsec Policy View) - HPE FlexNetwork HSR6800 Security Command Reference

Default command level
2: System level
Parameters
ip-address: Specifies the IP address of a peer KS.
Usage guidelines
You can specify multiple peer KS IP addresses by executing this command multiple times.
The peer IP address configuration takes effect only when KS redundancy is enabled with the
redundancy enable command.
In a GDOI KS redundancy scenario, the IP address of a peer KS specified on the local KS must be
the same as the source address that the peer KS uses to send redundancy protocol packets.
Examples
# Enable GDOI KS group redundancy, and specify 13.1.1.1 as a peer KS address.
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] redundancy enable
[Sysname-gdoi-ks-group-abc] peer address 13.1.1.1
[Sysname-gdoi-ks-group-abc]
Related commands
•
gdoi ks group
•
redundancy enable
•
source address

profile (GDOI KS group IPsec policy view)

Use profile to specify the IPsec profile to be referenced by the GDOI KS group IPsec policy.
Use undo profile to remove the IPsec profile referenced by the GDOI KS group IPsec policy.
Syntax
profile ipsec-profile-name
undo profile
Default
A GDOI KS group IPsec policy does not reference any IPsec profile.
Views
GDOI KS group IPsec policy view
Default command level
2: System level
Parameters
ipsec-profile-name: Specifies an IPsec profile by its name, a case-insensitive string of 1 to 15
characters.
Examples
# Create IPsec policy 10 for GDOI KS group abc, and reference IPsec profile profile1 for the IPsec
policy.
<Sysname> system-view
490