ike-peer

Function

The ike-peer command references an IKE peer in an IPSec policy.

The undo ike-peer command cancels the configuration.

By default, no IKE peer is referenced.

Format

ike-peer peer-name

undo ike-peer

Parameters

Parameter	Description	Value
peer-name	Specifies the name of the referenced IKE peer.	The value is an existing IKE peer name.

Views

ISAKMP IPSec policy view, IPSec policy template view, IPSec profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When you configure IKE negotiation, you need to reference an IKE peer in the specified view.

The remote IP address of the IKE peer referenced in an IPSec policy must be unique. You are recommended to configure the remote address range of the IKE peer in an IPSec policy template.

Prerequisites

An IKE peer has been created using the ike peer command.

Follow-up Procedure

Run the ike-proposal command to reference a configured IKE proposal and run the remote-address command to configure the remote address or domain name.

Precautions

IPSec profiles do not support IPv6.

Example

# Reference the IKE peer peer1 in the IPSec policy policy1.

<sysname> system-view
[sysname] ipsec policy policy1 1 isakmp
[sysname-ipsec-policy-isakmp-policy1-1] ike-peer peer1

# Reference the IKE peer peer1 in the IPSec profile profile1.

<sysname> system-view
[sysname] ipsec profile profile1
[sysname-ipsec-profile-profile1] ike-peer peer1