No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


NE20E-S2 V800R010C10SPC500 Configuration Guide - Security 01

This is NE20E-S2 V800R010C10SPC500 Configuration Guide - Security
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Workflow

Configuration Workflow

This section describes the process of creating an IPsec SA through IKE negotiation and the command calling relationship.

IPsec policies or IPsec policy templates can be applied. You can configure an IPsec policy on both ends of an IPsec tunnel. You can also configure an IPsec policy on one end and an IPsec policy template on the other end. The IPsec policy template is mainly applicable to the scenario in which the peer IP address is not fixed.

Parameters of the IPsec policy template and IPsec policy are the same, including the IPsec proposal, protected data flow, PFS feature, lifetime, and IKE peer. Note that the ACL, IPsec proposal, and IKE peer are mandatory. Other parameters are optional. If the IPsec policy template is used to match the policy during the IKE negotiation, the configured parameters must be matched. The non-configured parameters can adopt values configured by the initiating party.

The following figures show the processes of configuring an IPsec policy and an IPsec policy template.
Figure 12-2 Process of configuring an IPsec policy template
Figure 12-3 Process of configuring an IPsec policy
Updated: 2019-01-02

Document ID: EDOC1100055397

Views: 19690

Downloads: 39

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next