R2511-HP MSR Router Series Security Command Reference(V5)

303
Parameters
aes-xcbc-mac: Uses the AES-XCBC algorithm.
md5: Uses the MD5 algorithm.
sha1: Uses the SHA1 algorithm.
sha2-256: Uses the SHA2-256 algorithm.
Usage guidelines
You can specify multiple PRF algorithms for an IKEv2 proposal. An algorithm specified earlier has a
higher priority.
IMPORTANT:
You must specify at least one PRF al
g
orithm for an IKEv2 proposal. Otherwise, the proposal is incomplete
and useless.
Examples
# Create an IKEv2 proposal named prop1.
<Sysname> system-view
[Sysname] ikev2 proposal prop1
# Specify the PRF algorithms SHA1 and MD5 for the proposal, with SHA1 preferred.
[Sysname-ikev2-proposal-prop1] prf sha1 md5
Related commands
display ikev2 proposal
proposal (IKEv2 policy view)
Use proposal to specify the IKEv2 proposals for an IKEv2 policy to reference.
Use undo proposal to remove IKEv2 proposal references.
Syntax
proposal proposal-name&<1-6>
undo proposal [ proposal-name ]
Default
A non-system predefined IKEv2 policy references no IKEv2 proposal
Views
IKEv2 policy view
Default command level
2: System level
Parameters
proposal-name&<1-6>: Name of the IKEv2 proposal, a case-insensitive string of 1 to 32 characters.
&<1-6> means that you can specify the proposal-name argument for up to six times.
Usage guidelines
The IKEv2 proposals must already exist.