Proposal - H3C MSR 20-20 Command Reference Manual

Related command:
Example

proposal

Syntax
View
Parameter
Description
Related command:
Example
The local Diffie-Hellman group must be the same as that of the peer.
■
This command can be used only when the SAs are to be set up through IKE
■
negotiation.
ipsec policy-template, ipsec policy (system view).
# Enable and configure PFS for IPSec policy policy1.
<Sysname> system-view
[Sysname] ipsec policy policy1 200 isakmp
[Sysname-ipsec-policy-isakmp-policy1-200] pfs dh-group1
proposal proposal-name&<1-6>
undo proposal [ proposal-name ]
IPSec policy view/IPSec policy template view
proposal-name&<1-6>: Name of the IPSec proposal for the IPSec policy to
reference, a string of 1 to 15 characters. &<1-6> means that you can specify the
proposal-name argument for up to six times.
Use the command to specify the IPSec proposal(s) for the IPSec policy to
proposal
reference.
Use the undo proposal
IPSec policy.
By default, an IPSec policy references no IPSec proposal.
Note that:
You can specify only existing IPSec proposals when using this command.
■
A manual IPSec policy can reference only one IPSec proposal. To replace a
■
referenced IPSec proposal, use the undo proposal command to remove the
original proposal binding and then use the proposal command to reconfigure
one.
An IKE negotiated IPSec policy can reference up to six IPSec proposals. The IKE
■
negotiation process will search for and use the exactly matched proposal.
ipsec proposal, ipsec policy (system view).
# Configure IPSec policy policy1 to reference IPSec proposal prop1.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] quit
command to remove an IPSec proposal reference by the
2141