3.10 crypto ike proposal
Description Access to a group of commands to congure selected IKE proposal. If IKE
proposal is not found, the command tries to create it.
Command with no prex removes IKE proposal. At the same time references
to this IKE proposal are automatically deleted from all IKE policy.
Prex no Yes
Change settings Yes
Multiple input Yes
Group entry (config-ike-proposal)
Synopsis
(cong)> crypto ike proposal ‹name›
(cong)> no crypto ike proposal ‹name›
Arguments
DescriptionValueArgument
IKE proposal name. Latin letters,
numbers, dots, hyphens and
underscores are acceptable.
Stringname
Example
(config)> crypto ike proposal test
IpSec::Manager: Crypto ike proposal "test" successfully created.
History
Version Description
The crypto ike proposal command has been introduced.2.06
3.10.1 crypto ike proposal dh-group
Description Add the selected DH group to IKE proposal to work in the PFS mode. The order
of adding has a value for data exchange on the IKE protocol.
Command with no prex removes the selected group.
Prex no Yes
Change settings Yes
Multiple input Yes
Synopsis
(cong-ike-proposal)> dh-group ‹dh-group›
(cong-ike-proposal)> no dh-group ‹dh-group›
Keenetic Lite (KN-1310) — Command Reference Guide
47
Chapter 3 Command Reference