3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

IKE Configuration Commands 415
[SecBlade_VPN] ike local-name beijing_VPN
ike next-payload check
disabled
Syntax
ike next-payload check disabled
undo ike next-payload check disabled
View
System view
Parameter
None
Description
Use the ike next-payload check disabled command to cancel the check of
next-payload field in the last payload of the IKE negotiation packet during IPsec
negotiation for compatibility with other vendors.
Use the undo ike next-payload check disabled command to restore the
default, checking the next payload field.
An IKE negotiation packet comprises multiple payloads; the next-payload field is in
the generic header of the last payload. According to the protocol, this field should
be set to 0. It however may vary by vendor. For compatibility sake, you can use the
ike next-payload check disabled command to ignore this field during IPsec
negotiation.
Example
# Cancel the check of next-payload field in the last payload of the IKE negotiation
packet during IPsec negotiation.
[SecBlade_VPN] ike next-payload check disabled
ike peer Syntax
ike peer peer-name
undo ike peer peer-name
View
System view
Parameter
peer-name: IKE peer name, which can be a string of up to 15 characters.
Description
Use the ike peer command to configure an IKE peer and access IKE-peer view.
Use the undo ike peer command to delete an IKE peer.
Example
# Configure an IKE peer "new_peer" and access its view.