< Home

ikev1 phase1-phase2 sa dependent

Function

The ikev1 phase1-phase2 sa dependent command enables dependency between IPSec SA and IKE SA during IKEv1 negotiation.

The undo ikev1 phase1-phase2 sa dependent command cancels dependency between IPSec SA and IKE SA during IKEv1 negotiation.

By default, no dependency exists between IPSec SA and IKE SA during IKEv1 negotiation.

Format

ikev1 phase1-phase2 sa dependent

undo ikev1 phase1-phase2 sa dependent

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

During IKEv1 negotiation, an IKE SA is established during phase 1, and an IPSec SA is established during phase 2. By default, no dependency exists between IPSec SA and IKE SA, that is, the two SAs can be deleted separately. If the IKE SA is deleted but the corresponding IPSec SA still exists, traffic forwarding will be effected. To prevent this problem, you can run this command to enable dependency between IPSec SA and IKE SA.

Example

# Enable dependency between IPSec SA and IKE SA during IKEv1 negotiation.

<HUAWEI> system-view
[HUAWEI] ikev1 phase1-phase2 sa dependent
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >