3com MSR 20-20 참조 매뉴얼

ike proposal and display ike proposal.

# Use 56-bit DES in CBC mode as the encryption algorithm for IKE proposal 10.

<Sysname> system-view

[Sysname] ike proposal 10

[Sysname-ike-proposal-10] encryption-algorithm des-cbc 

exchange-mode { aggressive | main }

IKE Peer view

aggressive: Aggressive mode

main: Main mode.

Use the exchange-mode command to select an IKE negotiation mode.

Use the undo exchange-mode command to restore the default.

By default, main mode is used.

Note that if the user at one end of an IPSec tunnel obtains IP address automatically 
(for example, a dial-up user), IKE negotiation mode must be set to aggressive. In 
this case, an SA can be created as long as the username and password are correct.

id-type.

# Specify that IKE negotiation works in main mode.

<Sysname> system-view

[Sysname] ike peer peer1

[Sysname-ike-peer-peer1] exchange-mode main 

id-type { ip | name }

IKE Peer view

ip: Uses an IP address as the ID in IKE negotiation.

name: Uses a name as the ID in IKE negotiation.