R2511-HP MSR Router Series Security Command Reference(V5)

213
Usage guidelines
Using the undo command without the seq-number argument deletes an IPsec policy template group.
In an IPsec policy template group, an IPsec policy template with a smaller sequence number has a higher
priority.
Examples
# Create an IPsec policy template with the name template1 and the sequence number 100.
<Sysname> system-view
[Sysname] ipsec policy-template template1 100
[Sysname-ipsec-policy-template-template1-100]
Related commands
display ipsec policy template
ipsec profile (system view)
Use ipsec profile to create an IPsec profile and enter its view. An IPsec profile defines the IPsec transform
sets to be used to protect the data and the IKE negotiation parameters used to set up the SAs.
Use undo ipsec profile to delete an IPsec profile.
Syntax
ipsec profile profile-name
undo ipsec profile profile-name
Default
No IPsec profile exists.
Views
System view
Default command level
2: System level
Parameters
profile-name: Specifies the name for the IPsec profile, a case-insensitive string of 1 to 15 characters,
which cannot contain minus signs (-).
Usage guidelines
IPsec profiles can be applied to only DVPN interfaces and IPsec tunnel interfaces.
Examples
# Create IPsec profile profile1 and enter its view.
<Sysname> system-view
[Sysname] ipsec profile profile1
[Sysname-ipsec-profile-profile1]
Related commands
• ipsec profile (tunnel interface view)
• display ipsec profile