No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ike identity

ike identity


The ike identity command creates an identity filter set and enter the identity filter set view.

The undo ike identity command deletes an identity filter set.

By default, no identity filter set is configured.


ike identity identity-name

undo ike identity identity-name






Specifies the name of the identity filter set.

The value is a string of 1 to 31 case-sensitive characters without spaces.


System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run this command to control user access. The remote peer parameters defined in an identity filter set include the name, DN, IP address of the peer. Only initiators that match the identity filter set can establish an IPSec tunnel with the device, improving access security.

Follow-up Procedure

Configure an allowed peer in the identity filter set view and reference this identity filter set with match ike-identity command in the policy template view or IPSec profile view.


An IPSec tunnel can be established only when the remote end matches one or more parameters in the identity filter set and the IPSec negotiation parameters at both ends are consistent.


# Configure an identity filter set named identity1.

<Huawei> system-view
[Huawei] ike identity identity1
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 90203

Downloads: 124

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next