R2511-HP MSR Router Series Security Command Reference(V5)

292
Usage guidelines
You can specify multiple integrity protection algorithms for an IKEv2 proposal. An algorithm specified
earlier has a higher priority.
IMPORTANT:
You must specify at least one integrity protection algorithm for an IKEv2 proposal. Otherwise, the
proposal is incomplete and useless.
Examples
# Create an IKEv2 proposal named prop1.
<Sysname> system-view
[Sysname] ikev2 proposal prop1
# Specify the integrity protection algorithms MD5 and SHA1 for the proposal, with MD5 preferred.
[Sysname-ikev2-proposal-prop1] integrity sha1 md5
Related commands
display ikev2 proposal
ip-mask
Use ip-mask to specify a mask length for the local IPv4 address pool.
Use undo ip-mask to restore the default.
Syntax
ip-mask mask-length
undo ip-mask
Default
The mask length of a local IPv4 address pool referenced by an IKEv2 profile is 32.
Views
IKEv2 profile view
Default command level
2: System level
Parameters
mask-length: Specifies the mask length for the IPv4 addresses in the local IPv4 address pool, in the range
of 0 to 32.
Examples
# Set the mask length of the IPv4 address pool referenced by IKEv2 profile profile1 to 28.
<Sysname> system-view
[Sysname] ikev2 profile profile1
[Sysname-ikev2-profile-profile1] ip-mask 28
Related commands
• ikev2 ip-pool
• ip-pool