Related commands: ipsec policy (system view).
Examples
# Enable and configure PFS for IPsec policy policy1.
<Sysname> system-view
[Sysname] ipsec policy policy1 200 isakmp
[Sysname-ipsec-policy-isakmp-policy1-200] pfs dh-group2
policy enable
Syntax
policy enable
undo policy enable
View
IPsec policy view
Default level
2: System level
Parameters
None
Description
Used the policy enable command to enable the IPsec policy.
Use the undo policy enable command to disable the IPsec policy.
By default, the IPsec policy is enabled.
If the IPsec policy is not enabled for the IKE peer, the peer cannot take part in the IKE negotiation.
Related commands: ipsec policy (system view).
Examples
# Enable the IPsec policy with the name policy1 and sequence number 100.
<Sysname> system-view
[Sysname] ipsec policy policy1 100 isakmp
[Sysname-ipsec-policy-isakmp-policy1-100] policy enable
proposal (IPsec policy view)
Syntax
proposal proposal-name&<1-6>
undo proposal [ proposal-name ]
340