294
To do…
Command…
Remark
1.
Enter system view.
system-view
—
2.
Disable next payload field checking.
ike next-payload check disabled
Required
Enabled by default
Displaying and maintaining IKE
To do…
Command…
Remarks
Display IKE DPD information
display ike dpd
[
dpd-name
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Display IKE peer information
display
ike
peer
[
peer-name
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Display IKE SA information
display ike sa
[
verbose
[
connection-id
connection-id
|
remote-address
remote-address
] ]
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Display IKE proposal information
display ike proposal
[
|
{
begin
|
exclude
|
include
}
regular-
expression
]
Available in any view
Clear SAs established by IKE
reset ike sa
[
connection-id
]
Available in user view
IKE configuration examples
Main mode IKE with pre-shared key authentication
configuration example
Network requirements
As shown in
, an IPsec tunnel is established through IKE negotiation between Router A and
Router B to secure the communication between subnet 10.1.1.0/24 and subnet 10.1.2.0/24.
Router A is configured with an IKE proposal using the sequence number of 10 and the authentication
algorithm of MD5. Router B has only the default IKE proposal.
The two routers use the pre-shared key authentication method.
