ike proposal

Syntax

ike proposal proposal-number

undo ike proposal proposal-number

View

System view

Default level

2: System level

Parameters

proposal-number: IKE proposal number, in the range 1 to 65535. The lower the number, the higher the priority of the IKE proposal. During IKE negotiation, a high priority IKE proposal is matched before a low priority IKE proposal.

Description

Use the ike proposal command to create an IKE proposal and enter IKE proposal view.

Use the undo ike proposal command to delete an IKE proposal.

The system provides a default IKE proposal, which has the lowest priority and uses these settings:

• Encryption algorithm AES-128

• Authentication algorithm HMAC-SHA1

• Authentication method Pre-shared key

• DH group MODP_1024

• SA lifetime 86400 seconds

Related commands: display ike proposal.

Examples

# Create IKE proposal 10 and enter IKE proposal view.

<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]