H3C S6550X-HI Series Command Reference Manual page 2251

Examples
# Configure IPsec transform set tran1 to use the AES-CBC-128 algorithm as the ESP encryption
algorithm.
<Sysname> system-view
[Sysname] ipsec transform-set tran1
[Sysname-ipsec-transform-set-tran1] esp encryption-algorithm aes-cbc-128
Related commands
ipsec transform-set
ike-profile
Use
ike-profile
template.
Use undo ike-profile
Syntax
ike-profile profile-name
undo ike-profile
Default
No IKE profile is specified.
Views
IPsec policy view
IPsec policy template view
IPsec profile view
Predefined user roles
network-admin
Parameters
profile-name
characters.
Usage guidelines
If no IKE profile is specified for an IPsec policy, IPsec profile, or IPsec policy template, the device
selects an IKE profile configured in system view for negotiation. If no IKE profile is configured in
system view, the device uses the global IKE settings.
The IKE profile specified for an IPsec policy, IPsec profile, or IPsec policy template defines the
parameters used for IKE negotiation.
You can specify only one IKE profile for an IPsec policy, IPsec profile, or IPsec policy template.
Examples
# Specify IKE profile profile1 for IPsec policy policy1.
<Sysname> system-view
[Sysname] ipsec policy policy1 10 isakmp
[Sysname-ipsec-policy-isakmp-policy1-10] ike-profile profile1
Related commands
ike profile
to specify an IKE profile for an IPsec policy, IPsec profile, or IPsec policy
to restore the default.
: Specifies an IKE profile by its name, a case-insensitive string of 1 to 63
26