H3C Technologies H3C SecPath F1000-E - Manual (Page 141)

129
2. Click Add.
Figure 88 Adding an IKE peer
3. Configure an IKE peer as described in Table 5 .
4. Click Apply.
Table 8 Configuration items
Item Description
Peer Name Enter a name for the IKE peer.
IKE Negotiation Mode
Select the IKE negotiation mode in phase 1, which can be Main or Aggressive.
The aggressive mode is not available for the FIPS mode.
IMPORTANT:
• If one end of an IPsec tunnel is configured to obtain an IP address
dynamically, the IKE negotiation must use the aggressive mode to establish
SAs with the correct username and password.
• The specified negotiated mode is used when the local peer is the negotiation
initiator. When acting as the responder, the negotiation mode of the initiator
is used.