Configuring optional features for the IKE profile

Enter system view.

system-view

Enter IKE profile view.

ike profile profile-name

Configure optional features as needed.

• Configure IKE DPD.

  dpd interval interval [ retry seconds ] { on-demand | periodic }

  By default, IKE DPD is not configured for an IKE profile and an IKE profile uses the DPD settings configured in system view. If IKE DPD is not configured in system view either, the device does not perform dead IKE peer detection.

  The IKE DPD settings configured in the IKE profile view take precedence over those configured in system view.

• Specify the local interface or IP address to which the IKE profile can be applied.

  match local address { interface-type interface-number | { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] }

  By default, an IKE profile can be applied to any local interface or IP address.

  An IKE profile configured with this command has a higher priority over those not configured with this command.

• Specify a priority for the IKE profile.

  priority priority

  By default, the priority of an IKE profile is 100.

  The device selects a local IKE profile for IKE negotiation as follows:

  • First, it selects an IKE profile with the match local address command configured.

  • If a tie exists, it selects the IKE profile with a smaller priority number.

  • If a tie still exists, it selects the IKE profile configured earlier.