No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ipsec proposal

ipsec proposal

Function

The ipsec proposal command creates an IPSec proposal and displays the IPSec proposal view.

The undo ipsec proposal command deletes an IPSec proposal.

By default, no IPSec proposal is configured.

Format

ipsec proposal proposal-name

undo ipsec proposal proposal-name

Parameters

Parameter

Description

Value

proposal-name

Specifies the name of an IPSec proposal.

The value is a string of 1 to 15 case-sensitive characters without question marks (?) or spaces.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An IPSec proposal, part of an IPSec policy or an IPSec profile, defines security parameters for IPSec SA negotiation, including the security protocol, encryption and authentication algorithms, and encapsulation mode.

Follow-up Procedure

Run the proposal command to reference the IPSec proposal in an IPSec policy.

Precautions

By default, a new IPSec proposal created using the ipsec proposal command uses the ESP protocol, AES-256 encryption algorithm, SHA-256 authentication algorithm, and tunnel encapsulation mode.

Both ends of an IPSec tunnel must be configured with the same parameters.

Example

# Create an IPSec proposal newprop1.

<Huawei> system-view
[Huawei] ipsec proposal newprop1
[Huawei-ipsec-proposal-newprop1] 
Translation
Download
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 52885

Downloads: 102

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next