H3C S6550X-HI Series Command Reference Manual page 2321

Views
IKE profile view
Predefined user roles
network-admin
Parameters
keychain-name
Usage guidelines
You can specify a maximum of six IKE keychains for an IKE profile. An IKE keychain specified earlier
has a higher priority.
Examples
# Specify IKE keychain abc for IKE profile 1.
<Sysname> system-view
[Sysname] ike profile 1
[Sysname-ike-profile-1] keychain abc
Related commands
ike keychain
local-identity
Use
local-identity
peer during IKE negotiation.
Use
undo local-identity
Syntax
local-identity { address { ipv4-address | ipv6 ipv6-address } | dn | fqdn
[ fqdn-name ] | user-fqdn [ user-fqdn-name ] }
undo local-identity
Default
No local ID is configured for an IKE profile. An IKE profile uses the local ID configured in system view
by using the
profile uses the IP address of the interface to which the IPsec policy is applied as the local ID.
Views
IKE profile view
Predefined user roles
network-admin
Parameters
address { ipv4-address | ipv6 ipv6-address }
local ID.
: Uses the DN in the local certificate as the local ID.
dn
fqdn fqdn-name
string of 1 to 255 characters, such as www.test.com. If you do not specify this argument, the device
name configured by using the
: Specifies an IKE keychain name, a case-insensitive string of 1 to 63 characters.
to configure the local ID, the ID that the device uses to identify itself to the
to restore the default.
command. If the local ID is not configured in system view, the IKE
ike identity
: Uses an FQDN as the local ID. The
sysname
: Uses an IPv4 or IPv6 address as the
fqdn-name
command is used as the local FQDN.
27
argument is a case-sensitive