R2511-HP MSR Router Series Security Command Reference(V5)

587
Views
GDOI GM group view
Default command level
2: System level
Parameters
address ip-address: Specifies any valid IPv4 address to identify the GDOI GM group.
number number: Specifies a number in the range of 0 to 2147483647 to identify the GDOI GM group.
Usage guidelines
You can configure only one type of ID (either an IP address or a number) for a GDOI GM group. If you
execute this command multiple times, the most recent configuration takes effect.
Examples
# Set the ID of GDOI GM group abc to 123 456 .
<Sysname> system-view
[Sysname] gdoi gm group abc
[Sysname-gdoi-gm-group-abc] identity number 123456
# Configure the ID of GDOI GM group def as 202.202.202.10.
<Sysname> system-view
[Sysname] gdoi gm group def
[Sysname-gdoi-gm-group-def] identity address 202.202.202.10
Related commands
display gdoi gm
reset gdoi gm
Use reset gdoi gm to clear GDOI information that GMs downloaded from a KS, including the IKE SA,
rekey SA, IPsec SA, and ACL, and trigger the GMs to re-register with the KS.
Syntax
reset gdoi gm [ group group-name ]
Views
User view
Default command level
2: System level
Parameters
group group-name: Clears the GDOI information for GMs in a GDOI GM group. The group-name
argument specifies the name of a GDOI GM group, a case-sensitive string of 1 to 63 characters. If you
do not specify this option, the command displays GDOI information for all GMs.
Examples
# Clear the GDOI information for all GMs, and trigger the GMs to re-register with the KS.
<Sysname> reset gdoi gm
# Clear the GDOI information for GMs in GDOI GM group abc, and trigger the GMs to re-register with
the KS.