H3C SOHO IE4300, Command Reference Manual

Page: 2363 / 3296

116
Related commands
dpd
(IKEv2 profile view)
ikev2 keychain
Use
ikev2 keychain
to create an IKEv2 keychain and enter its view, or enter the view of an
existing IKEv2 keychain.
Use
undo ikev2 keychain
to delete an IKEv2 keychain.
Syntax
ikev2 keychain keychain-name
undo ikev2 keychain keychain-name
Default
No IKEv2 keychains exist.
Views
System view
Predefined user roles
network-admin
Parameters
keychain-name
: Specifies a name for the IKEv2 keychain. The keychain name is a
case-insensitive string of 1 to 63 characters and cannot contain a hyphen (-).
Usage guidelines
An IKEv2 keychain is required on both ends if either end uses preshared key authentication. The
preshared key configured on both ends must be the same.
You can configure multiple IKEv2 peers in an IKEv2 keychain.
Examples
# Create an IKEv2 keychain named key1 and enter IKEv2 keychain view.
<Sysname> system-view
[Sysname] ikev2 keychain key1
[Sysname-ikev2-keychain-key1]
ikev2 nat-keepalive
Use
ikev2 nat-keepalive
to set the NAT keepalive interval.
Use
undo ikev2 nat-keepalive
to restore the default.
Syntax
ikev2 nat-keepalive seconds
undo ikev2 nat-keepalive
Default
The NAT keepalive interval is 10 seconds.
Views
System view