H3C S6550X-HI Series Command Reference Manual page 2318

Views
System view
Predefined user roles
network-admin
Parameters
profile-name
Examples
# Create IKE profile 1 and enter its view.
<Sysname> system-view
[Sysname] ike profile 1
[Sysname-ike-profile-1]
ike proposal
Use
ike proposal
IKE proposal.
Use
undo ike proposal
Syntax
ike proposal
undo ike proposal proposal-number
Default
An IKE proposal exists, which has the lowest priority and uses the following settings:
•
Encryption algorithm—DES-CBC.
•
Authentication algorithm—HMAC-SHA1.
•
Authentication method—Preshared key authentication.
•
DH group—768-bit Diffie-Hellman group (group1).
•
IKE SA lifetime—86400 seconds.
You cannot change the settings of the default IKE proposal.
Views
System view
Predefined user roles
network-admin
Parameters
proposal-number
number, the higher the priority of the IKE proposal.
Usage guidelines
During IKE negotiation:
•
The initiator sends its IKE proposals to the peer.
If the initiator is using an IPsec policy with an IKE profile, the initiator sends all IKE proposals

specified for the IKE profile to the peer. An IKE proposal specified earlier for the IKE profile
has a higher priority.
: Specifies an IKE profile name, a case-insensitive string of 1 to 63 characters.
to create an IKE proposal and enter its view, or enter the view of an existing
to delete an IKE proposal.
proposal-number
: Specifies an IKE proposal number in the range of 1 to 65535. The lower the
24