323
Examples
# Set the subnet type of the peer security gateway to
multiple
.
<Sysname> system-view
[Sysname] ike peer xhy
[Sysname-ike-peer-xhy] peer multi-subnet
pre-shared-key
Use
pre-shared-key
to configure the pre-shared key to be used in IKE negotiation.
Use
undo pre-shared-key
to remove the configuration.
Syntax
In FIPS mode:
pre-shared-key
[ [
cipher
|
simple
]
key
]
In non-FIPS mode:
pre-shared-key
[
cipher
|
simple
]
key
Views
IKE peer view
Default command level
2: System level
Parameters
cipher
: Sets a ciphertext pre-shared key.
simple
: Sets a plaintext pre-shared key.
key
: Specifies the key string. This argument is case sensitive. If
cipher
is specified, it must be a
ciphertext string of 1 to 201 characters. If
simple
is specified, it must be a string of 1 to 128
characters. If neither
cipher
nor
simple
is specified, you set a plaintext key string. In FIPS mode, the
key string must contain at least eight characters, comprising digits, upper-case letters, lower-case
letters, and special characters.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text to the
configuration file.
Examples
# Set the pre-shared key used in IKE negotiation to plaintext string
abcde
.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] pre-shared-key simple abcde
Related commands
authentication-method
proposal (IKE peer view)
Use
proposal
to specify the IKE proposals for the IKE peer to reference.
Use
undo proposal
to remove one or all IKE proposals referenced by the IKE peer.
Syntax
proposal
proposal-number
&<1-6>
