R2511-HP MSR Router Series Security Command Reference(V5)

295
• ipv6-mask
keyring
Use keyring to specify an IKEv2 keyring for an IKEv2 profile.
Use undo keyring to remove the configuration.
Syntax
keyring keyring-name
undo keyring
Default
An IKEv2 profile references no keyring.
Views
IKEv2 profile view
Default command level
2: System level
Parameters
keyring-name: Specifies the name of an existing IKEv2 keyring, a case-insensitive string of 1 to 32
characters. It can consist of only English letters and digits.
Usage guidelines
When either or both peers use the pre-shared key authentication method, the IKEv2 profile must
reference and can only reference one keyring.
Different IKEv2 profiles can share the same IKEv2 keyring.
Examples
# Create an IKEv2 profile named profile1.
<Sysname> system-view
[Sysname] ikev2 profile profile1
# Specify the keyring keyring1 for the IKEv2 profile.
[Sysname-ikev2-profile-profile1] keyring keyring1
Related commands
• display ikev2 profile
• ikev2 keyring
lifetime
Use lifetime to set IKEv2 SA lifetime.
Use undo lifetime to restore the default.
Syntax
lifetime seconds
undo lifetime