R2511-HP MSR Router Series Security Command Reference(V5)

564
Default
A GDOI KS group IPsec policy does not reference any IPsec profile.
Views
GDOI KS group IPsec policy view
Default command level
2: System level
Parameters
ipsec-profile-name: Specifies an IPsec profile by its name, a case-insensitive string of 1 to 15 characters.
Examples
# Create IPsec policy 10 for GDOI KS group abc, and reference IPsec profile profile1 for the IPsec policy.
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] ipsec 10
[Sysname-gdoi-ks-group-abc-ipsec-10] profile profile1
[Sysname-gdoi-ks-group-abc-ipsec-10]
Related commands
• gdoi ks group
• ipsec
redundancy enable
Use redundancy enable to enable GDOI KS redundancy.
Use undo redundancy enable to disable GDOI KS redundancy.
Syntax
redundancy enable
undo redundancy enable
Default
GDOI KS redundancy is disabled.
Views
GDOI KS group view
Default command level
2: System level
Usage guidelines
GDOI KS redundancy enables a group of KSs to work together for high availability and load sharing.
One KS is the primary KS, and others are secondary KSs. Secondary KSs back up data for the primary
KS and can accept registrations from GMs.
Examples
# Enable GDOI KS redundancy in GDOI KS group abc.
<Sysname> system-view
[Sysname]gdoi ks group abc