Ike Proposal - H3C MSR Series Command Reference Manual

Syntax
ike profile profile-name
undo ike profile profile-name
Default
No IKE profiles exist.
Views
System view
Predefined user roles
network-admin
Parameters
profile-name: Specifies an IKE profile name, a case-insensitive string of 1 to 63 characters.
Examples
# Create IKE profile 1 and enter its view.
<Sysname> system-view
[Sysname] ike profile 1
[Sysname-ike-profile-1]

ike proposal

Use ike proposal to create an IKE proposal and enter its view, or enter the view of an existing IKE
proposal.
Use undo ike proposal to delete an IKE proposal.
Syntax
ike proposal proposal-number
undo ike proposal proposal-number
Default
An IKE proposal exists, which has the lowest priority and uses the following settings:
•
Encryption algorithm—DES-CBC in non-FIPS mode and AES-CBC-128 in FIPS mode.
•
Authentication method—HMAC-SHA1.
•
Authentication algorithm—Pre-shared key authentication.
•
DH group—Group1 in non-FIPS mode and group14 in FIPS mode.
•
IKE SA lifetime—86400 seconds.
You cannot change the settings of the default IKE proposal.
Views
System view
Predefined user roles
network-admin
Parameters
proposal-number: Specifies an IKE proposal number in the range of 1 to 65535. The lower the
number, the higher the priority of the IKE proposal.
596