H3C SOHO IE4300, Справочник по командам

Страница: 2350 / 3296

103
DPD: Interval 32, retry 23, periodic
Config-exchange: Request, Set send, Set accept
NAT keepalive: 10
AAA authorization: Domain domain1, username ikev2
Table 14 Command output
Field Description
IKEv2 profile Name of the IKEv2 profile.
Priority Priority of the IKEv2 profile.
Match criteria Criteria for looking up the IKEv2 profile.
Inside-vrf Inside VRF instance.
Local identity ID of the local end.
Local authentication method Method that the local end uses for authentication.
Remote authentication methods Methods that the remote end uses for authentication.
Keychain IKEv2 keychain that the IKEv2 profile uses.
Sign certificate domain PKI domain used for signature generation.
Verify certificate domain PKI domain used for verifying the remote end's certificate.
SA duration Lifetime of the IKEv2 SA.
DPD
DPD settings:
•
Detection interval in seconds.
•
Retry interval in seconds.
•
Detection mode, on demand or periodically.
If DPD is disabled, this field displays Disabled .
Config-exchange
Configuration exchange settings:
•
Request —The local end sends request messages
carrying the configuration request payload during the
IKE_AUTH exchange.
•
Set accept —The local end accepts the configuration set
payload carried in Info messages.
•
Set send —The local end sends Info messages carrying
the configuration set payload.
NAT keepalive NAT keepalive interval in seconds.
AAA authorization
This field is not supported in the current software version.
AAA authorization settings:
•
ISP domain name.
•
Username.
Related commands
ikev2 profile
display ikev2 proposal
Use
display ikev2 proposal
to display the IKEv2 proposal configuration.
Syntax
display ikev2 proposal [ name | default ]