No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR650, AR1600, and AR6100 V300R003

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
References for IPSec

References for IPSec

The following table lists the references for IPSec.

Table 4-12  References for IPSec



RFC 1829

The ESP DES-CBC Transform

RFC 1851

The ESP Triple DES Transform

RFC 2367

PF_KEY Key Management API, Version 2

RFC 2401

Security Architecture for the Internet Protocol

RFC 2402

IP Authentication Header

RFC 2403

The Use of HMAC-MD5-96 within ESP and AH

RFC 2404

The Use of HMAC-SHA-1-96 within ESP and AH

RFC 2405

The ESP DES-CBC Cipher Algorithm With Explicit IV

RFC 2406

IP Encapsulating Security Payload (ESP)

RFC 2407

The Internet IP Security Domain of Interpretation for ISAKMP

RFC 2408

Internet Security Association and Key Management Protocol (ISAKMP)

RFC 2409

The Internet Key Exchange (IKE)

RFC 2410

The NULL Encryption Algorithm and Its Use With IPsec

RFC 3456

Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode

RFC 3706

A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers

RFC 3947

Negotiation of NAT-Traversal in the IKE

RFC 3948

UDP Encapsulation of IPsec ESP Packets

RFC 4301

Security Architecture for the Internet Protocol

RFC 4302

IP Authentication Header

RFC 4303

IP Encapsulating Security Payload (ESP)

RFC 4306

Internet Key Exchange (IKEv2) Protocol

RFC 4307

Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2)

RFC 4308

Cryptographic Suites for IPsec

RFC 4434

The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE)

RFC 4478

Repeated Authentication in Internet Key Exchange (IKEv2) Protocol

RFC 4718

IKEv2 Clarifications and Implementation Guidelines

RFC 4835

Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH)

RFC 4945

The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX

RFC 5996

Internet Key Exchange Protocol Version 2 (IKEv2)


The ISAKMP Configuration Method


Using Isakmp Heartbeats for Dead Peer Detection
Updated: 2019-04-12

Document ID: EDOC1100041799

Views: 31399

Downloads: 43

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next