R2511-HP MSR Router Series Security Command Reference(V5)

289
Views
System view
Default command level
2: System level
Parameters
profile-name: Specifies the IKEv2 profile name, a case-insensitive string of 1 to 32 characters.
Examples
# Create an IKEv2 profile named profile1, and enter its view.
<Sysname> system-view
[Sysname] ikev2 profile profile1
[Sysname-ikev2-profile-profile1]
Related commands
• display ikev2 profile
• authentication
• identity local
• keyring
• match
ikev2 proposal
Use ikev2 proposal to create an IKEv2 proposal and enter IKEv2 proposal view. An IKEv2 proposal
includes security parameters used in IKE_SA_INIT exchanges, including the encryption algorithms,
integrity protection algorithms, pseudo-random function (PRF) algorithms, and DH groups.
Use undo ikev2 proposal to delete an IKEv2 proposal.
Syntax
ikev2 proposal proposal-name
undo ikev2 proposal proposal-name
Views
System view
Default command level
2: System level
Parameters
proposal-name: Specifies the IKEv2 proposal name, a case-insensitive string of 1 to 32 characters. The
name cannot be default.
Usage guidelines
The device has a system predefined IKEv2 proposal named default. This proposal has the lowest priority
and uses these settings:
• Encryption algorithms DES-CBC-128 and 3DES
• Integrity protection algorithms SHA1 and MD5
• PRF algorithms SHA1 and MD5