R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

92
A manual IPsec policy can reference only one IPsec proposal. To replace a referenced IPsec proposal,
use the undo proposal command to remove the original proposal binding and then use the proposal
command to reconfigure one.
An IKE negotiated IPsec policy can reference up to six IPsec proposals. The IKE negotiation process will
search for and use the exactly matched proposal.
An IPsec profile can reference up to six IPsec proposals. The IKE negotiation process will search for and
use the exactly matched proposal.
Related commands: ipsec proposal, ipsec policy (system view) and ipsec profile (system view).
Examples
# Configure IPsec policy policy1 to reference IPsec proposal prop1.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] quit
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] proposal prop1
# Configure IPsec profile profile1 to reference IPsec proposal prop2.
<Sysname> system-view
[Sysname] ipsec proposal prop2
[Sysname-ipsec-proposal-prop2] quit
[Sysname] ipsec profile profile1
[Sysname-ipsec-profile-profile1] proposal prop2
qos pre-classify
Syntax
qos pre-classify
undo qos pre-classify
View
IPsec policy view, IPsec policy template view
Default level
2: System level
Parameters
None
Description
Use qos pre-classify to enable packet information pre-extraction.
Use undo qos pre-classify to restore the default.
By default, packet information pre-extraction is disabled.
With the packet information pre-extraction feature enabled, QoS classifies a packet based on the header
of the original IP packet, that is, the header of the IP packet that has not been encapsulated by IPsec.
Related commands: ipsec policy (system view) and ipsec policy-template.