ipsec sm4 version

Function

The ipsec sm4 version command sets the SM4 version to be used for SA negotiation in an ike peer.

The undo ipsec sm4 version command restores the SM4 version to default configuration.

By default, SM4 version will be the global SM4 version configured by the ipsec global sm4 version command.

This command is supported only on the NetEngine 8000 F1A.

Format

ipsec sm4 version { draft-standard | standard }

undo ipsec sm4 version { draft-standard | standard }

Parameters

Parameter	Description	Value
draft-standard	Indicates the draft standard GM/T XXXX-2013 with SM4 algorithm value 127.	-
standard	Indicates the standard GM/T 0022-2014 with SM4 algorithm value of 129.	-

Parameter

Description

Value

draft-standard

Indicates the draft standard GM/T XXXX-2013 with SM4 algorithm value 127.

standard

Indicates the standard GM/T 0022-2014 with SM4 algorithm value of 129.

Views

IKE peer view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ike	write

Usage Guidelines

During the actual use, the SM4 algorithm on some devices follows the draft standard GM/T XXXX-2013, while the SM4 algorithm on router follows the standard GM/T 0022-2014, which will lead to a communication failure. To solve this problem, you can configure the SM4 algorithm on router to follow the draft standard GM/T XXXX-2013.

Example

# Set the SM4 algorithm to be draft standard GM/T XXXX-2013.

<HUAWEI> system-view
[~HUAWEI] ike peer peer1
[*HUAWEI-ike-peer-peer1] ipsec sm4 version draft-standard