R2511-HP MSR Router Series Security Command Reference(V5)

280
You can specify multiple DH groups for an IKEv2 proposal. A group specified earlier has a higher
priority.
IMPORTANT:
You must specify at least one DH
g
roup for an IKEv2 proposal. Otherwise, the proposal is incomplete and
useless.
Examples
# Create an IKEv2 proposal named prop1.
<Sysname> system-view
[Sysname] ikev2 proposal prop1
# Specify the DH groups 5 and 2 for the proposal, with group 5 preferred.
[Sysname-ikev2-proposal-prop1] group 5 2
Related commands
• ikev2 proposal
• display ikev2 proposal
hostname
Use hostname to configure the host name of the peer. When working as an IKEv2 negotiation initiator,
the local end uses this information to identify a peer.
Use undo hostname to delete the host name.
Syntax
hostname host-name
undo hostname host-name
Default
And IKEv2 peer has no host name.
Views
IKEv2 peer view
Default command level
2: System level
Parameters
host-name: Specifies the host name of the IKEv2 peer, a case-insensitive string of 1 to 255 characters.
Usage guidelines
This host name is only used to search for a peer during an IKEv2 negotiation that is intended for
implementing ACL-based IPsec.
Examples
# Create an IKEv2 keyring named keyr1.
<Sysname> system-view
[Sysname] ikev2 keyring keyr1
# Create an IKEv2 peer named peer1.
[Sysname-ikev2-keyring-keyr1] peer peer1