ipsec sm4 version

Function

The ipsec sm4 version command sets an SM4 algorithm version for IKE negotiation.

The undo ipsec sm4 version command restores the default SM4 algorithm version for IKE negotiation.

By default, the SM4 algorithm version draft-standard is used.

Format

ipsec sm4 version { draft-standard | standard }

undo ipsec sm4 version

Parameters

Parameter	Description	Value
draft-standard	Sets the SM4 algorithm version to that released in 2013. The attribute value of the SM4 algorithm is 127.	-
standard	Sets the SM4 algorithm version to that released in 2014. The attribute value of the SM4 algorithm is 129.	-

Views

IKE peer view

Default Level

2: Configuration level

Usage Guidelines

For IKE negotiation during interconnection with non-Huawei devices, if the SM4 algorithm versions used by devices of different vendors differ from each other, the IKE negotiation fails. In this case, run the ipsec sm4 version command to set the SM4 algorithm version consistent with that on non-Huawei devices.

Example

# Set the SM4 algorithm version used for IKE negotiation to standard.

<sysname> system-view
[sysname] ike peer p1
[sysname-ike-peer-p1] ipsec sm4 version standard