Specifying the IKE keychain or PKI domain
Restrictions and guidelines
Configure the IKE keychain or PKI domain for the IKE proposals to use. To use digital signature authentication, configure a PKI domain. To use pre-shared key authentication, configure an IKE keychain.
Procedure
Enter system view.
system-view
Enter IKE profile view.
ike profile profile-name
Specify the keychain for pre-shared key authentication or the PKI domain used to request a certificate for digital signature authentication.
Specify the keychain.
keychain keychain-name
Specify the PKI domain.
certificate domain domain-name
By default, no IKE keychain or PKI domain is specified in an IKE profile.