Configuring the IKE phase 1 negotiation mode

Restrictions and guidelines

Specify the IKE phase 1 negotiation mode (main or aggressive) that the device uses as the initiator. When the device acts as the responder, it uses the IKE negotiation mode of the initiator.

Procedure

  1. Enter system view.

    system-view

  2. Enter IKE profile view.

    ike profile profile-name

  3. Specify the IKE negotiation mode for phase 1.

    In non-FIPS mode:

    exchange-mode { aggressive | main }

    In FIPS mode:

    exchange-mode main

    By default, IKE negotiation in phase 1 uses the main mode.