3com MSR 20-20 참조 매뉴얼

C

HAPTER

 141: IKE C

ONFIGURATION

 C

OMMANDS

Use the authentication-method command to specify the authentication 
method to be used by an IKE proposal.

Use the undo authentication-method command to restore the default.

By default, an IKE proposal uses the pre-shared key authentication method.

ike proposal, display ike proposal.

# Specify that IKE proposal 10 uses the pre-shared key authentication method.

<Sysname> system-view

[Sysname] ike proposal 10

[Sysname-ike-proposal-10] authentication-method pre-share 

certificate domain domain-name

IKE Peer view

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

Use the certificate domain command to configure the PKI domain of the 
certificate when IKE uses digital signature as the authentication mode.

Use the undo certificate domain command to remove the configuration.

authentication-method on page 1721 and pki domain on page 2058.

# Configure the PKI domain as abcde for IKE negotiation.

<Sysname> system-view

[Sysname] ike peer peer

[Sysname-ike-peer-peer] certificate domain abcde 

dh { group1 | group2 | group5 | group14 }

IKE proposal view

group1: Uses the 768-bit Diffie-Hellman group for key negotiation in phase 1.

group2: Uses the 1024-bit Diffie-Hellman group for key negotiation in phase 1.