HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

474
# Specify DH group2 for the IKE proposal.
[GM3-ike-proposal-1] dh group2
[GM3-ike-proposal-1] quit
# Create IKE peer toks1.
[GM3] ike peer toks1
# Reference IKE proposal 1 for the IKE peer.
[GM3-ike-peer-toks1] proposal 1
# Configure the pre-shared key used in IKE negotiation as the plaintext string tempkey1.
[GM3-ike-peer-toks1] pre-shared-key simple tempkey1
# Specify the IP address of the IKE peer as 100.1.1.100.
[GM3-ike-peer-toks1] remote-address 100.1.1.100
[GM3-ike-peer-toks1] quit
# Create IKE peer toks2.
[GM3] ike peer toks2
# Reference IKE proposal 1 for the IKE peer.
[GM3-ike-peer-toks2] proposal 1
# Configure the pre-shared key used in IKE negotiation as the plaintext string tempkey1.
[GM3-ike-peer-toks2] pre-shared-key simple tempkey1
# Specify the IP address of the IKE peer as 200.2.2.200.
[GM3-ike-peer-toks2] remote-address 200.2.2.200
[GM3-ike-peer-toks2] quit
# Create GDOI GM group 1.
[GM3] gdoi gm group 1
# Set the GDOI GM group ID to 12345.
[GM3-gdoi-gm-group-1] identity number 12345
# Specify the KS addresses as 100.1.1.100 and 200.2.2.200.
[GM3-gdoi-gm-group-1] server address 100.1.1.100
[GM3-gdoi-gm-group-1] server address 200.2.2.200
[GM3-gdoi-gm-group-1] quit
# Create a GDOI IPsec policy.
[GM3] ipsec policy map 1 gdoi
# Reference GDOI GM group 1 for the GDOI IPsec policy.
[GM3-ipsec-policy-gdoi-map-1] group 1
[GM3-ipsec-policy-gdoi-map-1] quit
# Apply the IPsec policy to interface Ethernet 1/1.
[GM3] interface ethernet 1/1
[GM3-Ethernet1/1] ipsec policy map
[GM3-Ethernet1/1] quit
Verifying the configuration
After you complete the configuration, GM 1, GM 2, and GM 3 register with KS 1.
# Execute the display ike sa command on GM 1.
[GM1] display ike sa
total phase-1 SAs: 2

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English