Command Reference Guide

3Com Router 5000 Family and Router 6000 Family proposal ● 223
Command Reference
proposal
Purpose Use the proposal command to set the proposal used by the IPSec policy.
Use the undo proposal command to cancel the proposal used by the IPSec policy.
Syntax proposal proposal-name1 [ proposal-name2...proposal-name6 ]
undo proposal [ proposal-name ]
Parameters proposal-name1,…,
proposal-name6
Name of the proposals adopted.
Default By default, no proposal is used.
Example Set a proposal with name prop1, adopting ESP and the default algorithm, and set an
IPSec policy as using a proposal name prop1.
[3Com] ipsec proposal prop1
[3Com-ipsec-proposal-prop1] transform esp
[3Com-ipsec-proposal-prop1] quit
[3Com] ipsec policy policy1 100 manual
[3Com-ipsec-policy-manual-policy1-100] proposal prop1
View This command can be used in the following views:
■ IPSec Policy view
■ IPSec Policy Template view
Description Before using this command, the corresponding IPSec proposal must has been
configured.
If set up in manual mode, an SA can only use one proposal. And if a proposal is
already set, it needs to be deleted by using the
undo proposal command before a
new one can be set.
If set up in isakmp mode, an SA can use six proposals at most. IKE negotiation will
search for the completely matching proposal at both ends of the security tunnel.
If it is the IPSec template, each template can use six proposals at most, and the IKE
negotiation will search for the completely matching proposal.
Related Commands ■ ipsec policy (Interface view)
■ ipsec policy (System view)
■ ipsec proposal