R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

59
View
IPsec policy view, IPsec policy template view, IPsec profile view
Default level
2: System level
Parameters
proposal-name&<1-6>: Name of the IPsec proposal for the IPsec policy to reference, a string of 1 to 15
characters. &<1-6> means that you can specify the proposal-name argument for up to six times.
Description
Use the proposal command to specify the IPsec proposals for the IPsec policy or IPsec profile to reference.
Use the undo proposal command to remove an IPsec proposal reference by the IPsec policy or IPsec
profile.
By default, an IPsec policy or IPsec profile references no IPsec proposal.
The IPsec proposals must already exist.
A manual IPsec policy can reference only one IPsec proposal. To replace a referenced IPsec proposal,
use the undo proposal command to remove the original proposal binding and then use the proposal
command to reconfigure one.
An IKE negotiated IPsec policy can reference up to six IPsec proposals. The IKE negotiation process will
search for and use the exactly matched proposal.
An IPsec profile can reference up to six IPsec proposals. The IKE negotiation process will search for and
use the exactly matched proposal.
Related commands: ipsec proposal, ipsec policy (system view) and ipsec profile (system view).
Examples
# Configure IPsec policy policy1 to reference IPsec proposal prop1.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] quit
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] proposal prop1
# Configure IPsec profile profile1 to reference IPsec proposal prop2.
<Sysname> system-view
[Sysname] ipsec proposal prop2
[Sysname-ipsec-proposal-prop2] quit
[Sysname] ipsec profile profile1
[Sysname-ipsec-profile-profile1] proposal prop2
qos pre-classify
Syntax
qos pre-classify
undo qos pre-classify
View
IPsec policy view, IPsec policy template view