R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

35
Default level
2: System level
Parameters
pre-share: Uses the pre-shared key method.
rsa-signature: Uses the RSA digital signature method.
Description
Use authentication-method to specify an authentication method for an IKE proposal.
Use undo authentication-method to restore the default.
By default, an IKE proposal uses the pre-shared key authentication method.
Related commands: ike proposal and display ike proposal.
Examples
# Specify that IKE proposal 10 uses the pre-shared key authentication method.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] authentication-method pre-share
certificate domain
Syntax
certificate domain domain-name
undo certificate domain
View
IKE peer view
Default level
2: System level
Parameters
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
Description
Use certificate domain to configure the PKI domain of the certificate when IKE uses digital signature as
the authentication mode.
Use undo certificate domain to remove the configuration.
Related commands: authentication-method and pki domain.
Examples
# Configure the PKI domain as abcde for IKE negotiation.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] certificate domain abcde