329
Syntax
ipsec profile profile-name [ manual ]
undo ipsec profile profile-name
Default
No IPsec profile is created.
Views
System view
Predefined user roles
network-admin
Parameters
profile-name: Specifies a name for the IPsec profile, a case-insensitive string of 1 to 63 characters.
manual: Specifies the IPsec SA setup mode as manual.
Usage guidelines
When you create an IPsec profile, you must specify the IPsec SA setup mode (manual). When you enter
the view of an existing IPsec profile, you do not need to specify the IPsec SA setup mode.
An IPsec profile is similar to a manual IPsec policy. It is dedicatedly used for IPsec protection for
application protocols, including OSPFv3, IPv6 BGP, and RIPng.
Examples
# Create an IPsec profile named profile1.
<Sysname> system-view
[Sysname] ipsec profile profile1 manual
[Sysname-ipsec-profile-profile1]
Related commands
display ipsec profile
ipsec sa global-duration
Use ipsec sa global-duration to configure the global IPsec SA lifetime.
Use undo ipsec sa global-duration to restore the default.
Syntax
ipsec sa global-duration { time-based seconds | traffic-based kilobytes }
undo ipsec sa global-duration { time-based | traffic-based }
Default
The time-based global lifetime is 3600 seconds, and the traffic-based global lifetime is 1843200 bytes.
Views
System view
Predefined user roles
network-admin