Command Reference Guide

3Com Router 5000 Family and Router 6000 Family ipsec policy (System view) ● 165
Command Reference
ipsec policy (System view)
Purpose Use the ipsec policy command to establish or modify an ipsec policy, and enter
IPSec policy view.
Use the undo ipsec policy policy-name command to delete an IPSec policy
group whose name is
policy-name.
Use the undo ipsec policy policy-name seq-number command to delete
an IPSec policy whose name is
policy-name and sequence number is
seq-number.
Syntax ipsec policy policy-name seq-number [ manual | isakmp [ template
template-name ] ]
undo ipsec policy policy-name [ seq-number ]
Parameters policy-name
Name of the ipsec policy. The naming rule is: the
length of the name is 1 to 15 characters, the name is
case insensitive and the characters can be English
characters or numbers, cannot include “-”.
seq-number
Sequence number of the ipsec policy, ranging 1 to
10000, with lower value indicating higher sequence
priority.
manual
Sets up SA manually.
isakmp
Sets up SA through IKE negotiation.
template
Dynamically sets up SA by using policy template. The
policy-name discussed here will reference
template-name which is a created policy template thus
named.
template-name
Name of the template.
Default By default, no ipsec policy exists.
Example Set an ipsec policy whose name is newpolicy1, sequence number is 100, and
negotiation mode is isakmp.
[3Com] ipsec policy newpolicy1 100 isakmp
[3Com-ipsec-policy-isakmp-newpolicy1-100]
View This command can be used in the following views:
■ System view