3com 3031 Instruccion De Instalación
IKE Configuration
859
Configuring IKE Peer
Creating an IKE peer
Perform the following in the System View.
Configuring IKE negotiation mode
Perform the following in the IKE-peer View.
By default, the main mode is adopted.
If the IP address of one end of a security tunnel is dynamic, you must adopt the
aggressive mode for IKE negotiation.
aggressive mode for IKE negotiation.
Configuring pre-shared key
Perform the following in the IKE-peer View.
Configuring ID type in IKE negotiation
Perform the following in the IKE-peer View.
By default, IP address is taken as the ID in IKE negotiation.
In main mode, only IP address can be taken as the ID in IKE negotiation. In
aggressive mode, however, you may use either IP address or name as the ID in IKE
negotiation.
aggressive mode, however, you may use either IP address or name as the ID in IKE
negotiation.
Table 932 Configuring IKE peer
Operation
Command
Configure an IKE peer and access the IKE peer view
ike-peer peer-name
Delete the IKE peer
undo ike-peer peer-name
Table 933 Configuring negotiation mode
Operation
Command
Configure IKE negotiation mode
exchange-mode [ aggressive | main ]
Restore the default IKE negotiation mode
undo exchange-mode
Table 934 Configuring pre-shared key
Operation
Command
Configure a pre-shared key for IKE negotiation
pre-shared-key key
Remove the pre-shared key used in IKE negotiation
undo pre-shared-key
Table 935 Configuring ID type in IKE negotiation
Operation
Command
Select ID type of the local security GW in the IKE
negotiation
negotiation
id-type [ ip | name ]
Restore the default ID type of the local security GW in
the IKE negotiation
the IKE negotiation
undo id-type