HPE FlexNetwork HSR6800 series, Security Command Reference

Page: 330 / 538

317
Use undo ike proposal to delete an IKE proposal.
Syntax
ike proposal proposal-number
undo ike proposal proposal-number
Views
System view
Default command level
2: System level
Parameters
proposal-number : Specifies the IKE proposal number in the range of 1 to 65535. The lower the
number, the higher the priority of the IKE proposal. During IKE negotiation, a high priority IKE
proposal is matched before a low priority IKE proposal.
Usage guidelines
The system provides a default IKE proposal, which has the lowest priority. The following table shows
the default settings for the default IKE proposal in non-FIPS mode and FIPS mode:
Setting Non-FIPS mode FIPS mode
Encryption algorithm DES-CBC AES_CBC_128
Authentication
algorithm
HMAC-SHA1 SHA
Authentication
method
Pre-shared key Pre-shared key
DH group MODP_768 MODP_1024
SA lifetime 86400 seconds 86400 seconds
Examples
# Create IKE proposal 10 and enter IKE proposal view.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]
Related commands
display ike proposal
ike sa keepalive-timer interval
Use ike sa keepalive-timer interval to set the ISAKMP SA keepalive interval.
Use undo ike sa keepalive-timer interval to disable the ISAKMP SA keepalive transmission
function.
Syntax
ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
Default
No keepalive packet is sent.