H3C SOHO IE4300, Command Reference Manual

Page: 2277 / 3296

30
Parameters
ipv6-policy-template
: Specifies an IPv6 IPsec policy template.
policy-template : Specifies an IPv4 IPsec policy template.
template-name : Specifies a name for the IPsec policy template, a case-insensitive string of 1 to
63 characters.
seq-number : Specifies a sequence number for the IPsec policy template entry, in the range of 1 to
65535. A smaller number indicates a higher priority.
Usage guidelines
The configurable parameters for an IPsec policy template are similar to the parameters that you use
when you configure an IKE-based IPsec policy. However, all parameters except for the IPsec
transform sets and the IKE peer are optional for an IPsec policy template.
An IPsec policy template is a set of IPsec policy template entries that have the same name but
different sequence numbers.
With the
seq-number
argument specified, the
undo
command deletes an IPsec policy template
entry.
An IPv4 IPsec policy template and an IPv6 IPsec policy template can have the same name.
Examples
# Create an IPsec policy template entry and enter the IPsec policy template view. The template
name is
template1 and the sequence number is 100.
<Sysname> system-view
[Sysname] ipsec policy-template template1 100
[Sysname-ipsec-policy-template-template1-100
]
Related commands
display ipsec { ipv6-policy-template | policy-template }
ipsec { ipv6-policy | policy }
ipsec { ipv6
-
policy | policy } isakmp template
ipsec anti-replay check
Use
ipsec anti-replay check
to enable IPsec anti-replay checking.
Use
undo ipsec anti-replay check
to disable IPsec anti-replay checking.
Syntax
ipsec anti-replay check
undo ipsec anti-replay check
Default
IPsec anti-replay checking is enabled.
Views
System view
Predefined user roles
network-admin