ike identity

Function

The ike identity command configures a filter set used in IKE negotiation and displays the IKE filter set view.

The undo ike identity command deletes a filter set.

By default, no filter set used in IKE negotiation is configured.

This command is supported only on the NetEngine 8000 F1A.

Format

ike identity name

undo ike identity name

Parameters

Parameter	Description	Value
name	Specifies the filter set name.	The value is a string of 1 to 15 case-insensitive characters.

Parameter

Description

Value

name

Specifies the filter set name.

The value is a string of 1 to 15 case-insensitive characters.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ike	write

Usage Guidelines

To configure a filter set used in IKE negotiation, run the ike identity command. If an IKE peer meets filter conditions, IKE negotiation is successful, and the IKE peer can access. If an IKE peer does not meet filter conditions, IKE negotiation fails.

Example

# Configure a filter set named identity1 for IKE negotiation and display the IKE filter set view.

<HUAWEI> system-view
[~HUAWEI] ike identity identity1
[*HUAWEI-ike-identity-identity1]