Parameters
keychain-name: Specifies an IKE keychain name, a case-insensitive string of 1 to 63 characters.
Usage guidelines
An IKE profile can reference up to six IKE keychains. An IKE keychain specified earlier has a higher
priority.
Examples
# Specify IKE profile 1 for IKE keychain abc.
<Sysname> system-view
[Sysname] ike profile 1
[Sysname-ike-profile-1] keychain abc
Related commands
ike keychain
local-identity
Use local-identity to configure the local ID, the ID that the device uses to identify itself to the peer during
IKE negotiation.
Use undo local-identity to delete the local ID.
Syntax
local-identity { address { ipv4-address | ipv6 ipv6-address } | dn | fqdn [ fqdn-name ] | user-fqdn
[ user-fqdn-name ] }
undo local-identity
Default
No local ID is configured for an IKE profile, and an IKE profile uses the local ID configured in system view
(using the ike identity command). If no local ID is configured in system view either, the IP address of the
interface that the IPsec policy or IPsec policy template is applied to is used as the local ID.
Views
IKE profile view
Predefined user roles
network-admin
Parameters
address { ipv4-address | ipv6 ipv6-address }: Uses an IPv4 or IPv6 address as the local ID.
dn: Uses the DN in the local certificate as the local ID.
fqdn fqdn-name: Uses an FQDN as the local ID. The fqdn-name argument is a case-sensitive string of 1
to 255 characters, such as www.test.com. If you do not specify this argument, the device name
configured by using the sysname command is used as the local FQDN.
388
To Next Page
Loading...
Need help?
General
