377
Usage guidelines
The address option or the hostname option specifies the peer with which the device can use the
pre-shared key to perform IKE negotiation.
Two peers must be configured with the same pre-shared key to pass pre-shared key authentication.
For security purposes, all pre-shared keys, including those configured in plain text, are saved in cipher
text to the configuration file.
Examples
# Create IKE keychain key1 and enter IKE keychain view.
<Sysname> system-view
[Sysname] ike keychain key1
# Set the pre-shared key to be used for IKE negotiation with peer 1.1.1.2 to 123456TESTplat&!.
[Sysname-ike-keychain-key1] pre-shared-key address 1.1.1.2 255.255.255.255 key simple
123456TESTplat&!
Related commands
• authentication-method
• keychain
priority (IKE keychain view)
Use priority to specify a priority for an IKE keychain.
Use undo priority to restore the default.
Syntax
priority number
undo priority
Default
The priority of an IKE keychain is 100.
Views
IKE keychain view
Predefined user roles
network-admin
Parameters
priority number: Specifies a priority number in the range of 1 to 65535. The lower the priority number,
the higher the priority.
Usage guidelines
To determine the priority of an IKE keychain, the device examines the existence of the match local
address command before examining the priority number. An IKE keychain with the match local address
command configured has a higher priority than an IKE keychain that does not have the match local
address command configured.
Examples
# Set the priority to 10 for IKE keychain key1.