R3303-HP HSR6800 Routers Security Command Reference

512
Default
No number is configured for a GDOI KS group number.
Views
GDOI KS group view
Default command level
2: System level
Parameters
number: Specifies a number in the range of 0 to 2147483647 to identify the GDOI KS group.
Usage guidelines
You can configure only one type of ID (either an IP address or a number) for a GDOI KS group. A GDOI
KS group uses the IP address or the number, whichever is configured later.
Examples
# Configure the number of the GDOI KS group abc as 12 3456 .
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] identity number 123456
Related commands
• identity address
• gdoi ks group
ipsec
Use ipsec to create an IPsec policy for the GDOI KS group and enter GDOI KS IPsec policy view.
Use undo ipsec to delete an IPsec policy for the GDOI KS group.
Syntax
ipsec sequence-number
undo ipsec sequence-number
Default
No IPsec policy is created for a GDOI KS group.
Views
GDOI KS group view
Default command level
2: System level
Parameters
sequence-number: Specifies a sequence number for the IPsec policy, in the range of 1 to 65535.
Usage guidelines
You can create multiple IPsec policies for a GDOI KS group. An IPsec policy with a smaller number has
a higher priority. A KS can send multiple IPsec policies to GMs at a time, and GMs use the IPsec policies
from the one with the highest priority.