HP VPN Firewall Appliances VPN Command Reference

48
pre-shared-key
Use pre-shared-key to configure the pre-shared key to be used in IKE negotiation.
Use undo pre-shared-key to remove the configuration.
Syntax
pre-shared-key [ cipher | simple ] key
undo pre-shared-key
Views
IKE peer view
Default command level
2: System level
Parameters
cipher: Sets a ciphertext pre-shared key.
simple: Sets a plaintext pre-shared key. This keyword is not available for FIPS mode.
key: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be a ciphertext
string of 1 to 201 characters. If simple is specified, it must be a string of 1 to 128 characters. If neither
cipher nor simple is specified, you set a plaintext key string.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text.
Usage guidelines
In FIPS mode, a plaintext pre-shared key is not supported and the pre-shared key is at least 8 characters
comprising uppercase letters, lowercase letters, digits, and special characters.
Examples
# Set the pre-shared key used in IKE negotiation to plaintext string abcde.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] pre-shared-key simple abcde
Related commands
authentication-method
proposal
Use proposal to specify the IKE proposals for the IKE peer to reference.
Use undo proposal to remove one or all IKE proposals referenced by the IKE peer.
Syntax
proposal proposal-number&<1-6>
undo proposal [ proposal-number ]
Default
An IKE peer references no IKE proposals and, when initiating IKE negotiation, it uses the IKE proposals
configured in system view.