Command Reference Guide

3Com Router 5000 Family and Router 6000 Family ipsec policy-template ● 167
Command Reference
ipsec policy-template
Purpose Use the ipsec policy-template command to establish or modify an IPSec policy
template, and enter IPSec policy template view.
Use the undo ipsec policy-template template-name command to delete
the IPSec policy template group named
template-name.
Use the undo ipsec policy-template template-name seq-number
command to delete the IPSec policy template with the name of
template-name
and the serial number of
seq-number.
Syntax ipsec policy-template template-name seq-number
undo ipsec policy-template template-name [ seq-number ]
Parameters template-name
Name of the IPSec policy template, comprised of an
alphanumeric string of 1 to 15 characters, case
insensitive, excluding minus signs (-).
seq-number
Number of the IPSec policy template. Valid values are 1
to 10000. In one IPSec policy template group, the
smaller the serial number of an IPSec policy template,
the higher its preference.
Default By default, no IPSec policy template exists.
Example Establish an IPSec policy template with the name of template1 and the serial number
of 100.
[3Com] ipsec policy-template template1 100
[3Com-ipsec-policy-template- template1-100]
View This command can be used in the following views:
■ System view
Description A policy template that has been created with the name of template-name can be
referenced by the
ipsec policy policy-name seq-number isakmp
template
template-name command to create an IPSec policy.
The IPSec policy template and the security policy of IPSec IPSAMP negotiation share
the same kinds of arguments, including the referenced IPSec proposal, the protected
traffic, PFS feature, lifetime, and the address of the remote tunnel end. However, you
should note that the proposal argument is compulsory to be configured whereas
other arguments are optional. If an IPSec policy template is used for the policy match
operation undertaken in an IKE negotiation, the configured arguments must be