R3303-HP HSR6800 Routers Security Command Reference

340
Examples
# Set the subnet type of the peer security gateway to multiple.
<Sysname> system-view
[Sysname] ike peer xhy
[Sysname-ike-peer-xhy] peer multi-subnet
pre-shared-key
Use pre-shared-key to configure the pre-shared key to be used in IKE negotiation.
Use undo pre-shared-key to remove the configuration.
Syntax
pre-shared-key [ cipher | simple ] key
undo pre-shared-key
Views
IKE peer view
Default command level
2: System level
Parameters
cipher: Sets a ciphertext pre-shared key.
simple: Sets a plaintext pre-shared key.
key: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be a ciphertext
string of 1 to 201 characters. If simple is specified, it must be a string of 1 to 128 characters. If neither
cipher nor simple is specified, you set a plaintext key string. In FIPS mode, the key string must contain at
least eight characters, comprising digits, upper-case letters, lower-case letters, and special characters.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text to the
configuration file.
Examples
# Set the pre-shared key used in IKE negotiation to plaintext string abcde.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] pre-shared-key simple abcde
Related commands
authentication-method
proposal (IKE peer view)
Use proposal to specify the IKE proposals for the IKE peer to reference.
Use undo proposal to remove one or all IKE proposals referenced by the IKE peer.
Syntax
proposal proposal-number&<1-6>