R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

17
Field Description
transmitting entity Entity in the IKE negotiation
local ip IP address of the local gateway
local id type Identifier type of the local gateway
local id Identifier of the local gateway
remote ip IP address of the remote gateway
remote id type Identifier type of the remote gateway
remote id Identifier of the remote security gateway
authentication-method Authentication method used by the IKE proposal
authentication-algorithm Authentication algorithm used by the IKE proposal
encryption-algorithm Encryption algorithm used by the IKE proposal
life duration(sec) Lifetime of the ISAKMP SA in seconds
remaining key duration(sec) Remaining lifetime of the ISAKMP SA in seconds
exchange-mode IKE negotiation mode in phase 1
diffie-hellman group DH group used for key negotiation in IKE phase 1
nat traversal Whether NAT traversal is enabled
dpd
Syntax
dpd dpd-name
undo dpd
View
IKE peer view
Default level
2: System level
Parameters
dpd-name: DPD detector name, a string of 1 to 15 characters.
Description
Use the dpd command to apply a DPD detector to an IKE peer.
Use the undo dpd command to remove the application.
By default, no DPD detector is applied to an IKE peer.
Examples
# Apply dpd1 to IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] dpd dpd1