No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - VPN

AR650, AR1600, and AR6100 V300R003

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring DSCP Priority for IKE Packets

(Optional) Configuring DSCP Priority for IKE Packets

Context

IKE packets are used to negotiate IKE SAs and IPSec SAs or used for Deal Peer Detection (DPD). If IKE packets are lost during transmission, problems such as failures to negotiate IKE SAs and IPSec SAs may occur. As a result, packets cannot be protected by IPSec SAs. To solve these problems, ensure that network devices process IKE packets before service packets.

You can increase IKE packet priority by specifying the DSCP priority for IKE packets. This configuration ensures that IKE packets are processed in time on a busy network, improving transmission reliability of IKE packets.

You can configure the DSCP priority for IKE packets globally or on an IKE peer. The DSCP priority configured on an IKE peer takes precedence over that configured globally. When the DSCP priority is not configured on an IKE peer, the DSCP priority configured globally takes effect.

Procedure

  • Configure the DSCP priority globally.
    1. Run system-view

      The system view is displayed.

    2. Run ike dscp dscp-value

      The DSCP priority of IKE packets is configured globally.

      By default, the global DSCP priority of IKE packets is 0.

  • Configure the DSCP priority on an IKE peer.
    1. Run system-view

      The system view is displayed.

    2. Run ike peer peer-name

      An IKE peer is created and the IKE peer view is displayed.

    3. Run dscp dscp-value

      The DSCP priority of IKE packets is configured on the IKE peer.

      By default, the DSCP priority of IKE packets on a specified IKE peer is 0.

Download
Updated: 2019-04-12

Document ID: EDOC1100041799

Views: 31770

Downloads: 45

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next