HP 5920

key: Specifies a pre-shared key.
simple: Specifies a pre-shared key in plain text.
simple-key: Specifies a plaintext key string. In non-FIPS mode, it is a case-sensitive string of 1 to 128
characters. In FIPS mode, it is a case-sensitive string of 15 to 128 characters, and the string must contains
4 types of characters including digits, uppercase letters, lowercase letters, and special characters.
cipher: Specifies a pre-shared key in cipher text.
cipher-key: Specifies a ciphertext key string. In non-FIPS mode, it is a case-sensitive string of 1 to 201
characters. In FIPS mode, it is a case-sensitive string of 15 to 201 characters.
Usage guidelines
The address option or the hostname option specifies with which peer the device can use the pre-shared
key to perform IKE negotiation.
Two peers must be configured with the same pre-shared key to pass pre-shared key authentication.
For security purposes, all pre-shared keys, including those configured in plain text, are saved in cipher
text to the configuration file.
Examples
# Create IKE keychain key1 and enter IKE keychain view.
<Sysname> system-view
[Sysname] ike keychain key1
# Set the pre-shared key to be used for IKE negotiation with peer 1.1.1.2 to 123 456 .
[Sysname-ike-keychain-key1] pre-shared-key address 1.1.1.2 255.255.255.255 key simple
123456
Related commands
• authentication-method
• keychain
priority (IKE keychain view)
Use priority to specify a priority for an IKE keychain.
Use undo priority to restore the default.
Syntax
priority number
undo priority
Default
The priority of an IKE keychain is 100.
Views
IKE keychain view
394