R211x-HP Flexfabric 11900 Security Command Reference

246
Predefined user roles
network-admin
mdc-admin
Parameters
priority number: Specifies a priority number in the range of 1 to 65535. The smaller the priority number,
the higher the priority.
Usage guidelines
To determine the priority of an IKE profile, the device examines the existence of the match local address
command before examining the priority number. An IKE profile with the match local address command
configured has a higher priority than an IKE profile that does not have the match local address command
configured.
Examples
# Set the priority to 10 for IKE profile prof1.
<Sysname> system-view
[Sysname] ike profile prof1
[Sysname-ike-profile-prof1] priority 10
proposal
Use proposal to specify the IKE proposals for an IKE profile to reference.
Use undo proposal to remove the IKE proposal references.
Syntax
proposal proposal-number&<1-6>
undo proposal
Default
An IKE profile references no IKE proposals and uses the IKE proposals configured in system view for IKE
negotiation.
Views
IKE profile view
Predefined user roles
network-admin
mdc-admin
Parameters
proposal-number&<1-6>: Specifies up to six IKE proposal numbers, each in the range of 1 to 65535. An
IKE proposal specified earlier has a higher priority.
Usage guidelines
When acting as the initiator, the device sends the specified IKE proposals to its peer for IKE negotiation.
When acting as the responder, the device uses the IKE proposals configured in system view to match the
IKE proposals received from the initiator.