R2511-HP MSR Router Series Security Command Reference(V5)

202
<Sysname> system-view
[Sysname] ipsec policy policy1 10 isakmp
[Sysname-ipsec-policy-isakmp-policy1-10] ike-peer peer1
# Configure a reference to multiple IKE peers in an IPsec policy.
<Sysname> system-view
[Sysname] ipsec policy policy1 10 isakmp
[Sysname-ipsec-policy-isakmp-policy1-10] ike-peer peer1
[Sysname-ipsec-policy-isakmp-policy1-10] ike-peer peer2
# Configure a reference to multiple IKE peers in an IPsec policy, and specify a primary IKE peer.
<Sysname> system-view
[Sysname] ipsec policy policy1 10 isakmp
[Sysname-ipsec-policy-isakmp-policy1-10] ike-peer peer1 primary
[Sysname-ipsec-policy-isakmp-policy1-10] ike-peer peer2
# Configure a reference to an IKE peer in an IPsec profile.
<Sysname> system-view
[Sysname] ipsec profile profile1
[Sysname-ipsec-profile- profile1] ike-peer peer1
Related commands
• ipsec policy
• ipsec profile
ikev2 profile (IPsec policy view/IPsec policy template
view/IPsec profile view)
Use ikev2 profile to specify an IKEv2 profile for an IPsec policy, IPsec policy template, or IPsec profile.
Use undo ikev2 profile to remove the configuration.
Syntax
ikev2 profile profile-name
undo ikev2 profile
Default
No IKEv2 profile is specified for an IPsec policy, IPsec policy template, or IPsec profile.
Views
IPsec policy view, IPsec policy template view, IPsec profile view
Default command level
2: System level
Parameters
profile-name: Specifies the IKEv2 profile name, a case-insensitive string of 1 to 32 characters.
Usage guidelines
The IKEv2 profile must already exist.
For an IPsec policy or profile, you can specify an IKE peer for IKEv1 negotiation or an IKEv2 profile for
IKEv2 negotiation, but not both at the same time.