R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

91
View
IPsec policy view, IPsec policy template view
Default level
2: System level
Parameters
None
Description
Used policy enable to enable the IPsec policy.
Use undo policy enable to disable the IPsec policy.
By default, the IPsec policy is enabled.
The command is not applicable to manual IPsec policies.
If the IPsec policy is not enabled for the IKE peer, the peer cannot take part in the IKE negotiation.
Related commands: ipsec policy (system view) and ipsec policy-template.
Examples
# Enable the IPsec policy with the name policy1 and sequence number 100.
<Sysname> system-view
[Sysname] ipsec policy policy1 100 isakmp
[Sysname-ipsec-policy-isakmp-policy1-100] policy enable
proposal (IPsec policy view/IPsec policy template view/IPsec
profile view)
Syntax
proposal proposal-name&<1-6>
undo proposal [ proposal-name ]
View
IPsec policy view, IPsec policy template view, IPsec profile view
Default level
2: System level
Parameters
proposal-name&<1-6>: Name of the IPsec proposal for the IPsec policy to reference, a string of 1 to 32
characters. &<1-6> means that you can specify the proposal-name argument for up to six times.
Description
Use proposal to specify the IPsec proposals for the IPsec policy or IPsec profile to reference.
Use undo proposal to remove an IPsec proposal reference by the IPsec policy or IPsec profile.
By default, an IPsec policy or IPsec profile references no IPsec proposal.
The IPsec proposals must already exist.