H3C Technologies H3C SecPath F1000-E - Manual (Page 245)

233
Item Description
Pre-Shared Key Select the authentication method for IKE negotiation and specify the required
argument. Options include:
• Pre-Shared Key—Uses the pre-shared key authentication method.
• PKI Domain—Uses the RSA signature authentication method. Available PKI
domains are those configured by selecting VPN > Certificate Manager > Domain
from the navigation tree.
IMPORTANT:
If you select PKI Domain, an IKE proposal numbered 1 will be created.
PKI Domain
Enable DPD
Select this box to enable dead peer detection (DPD).
IMPORTANT:
If you enable DPD and the name of the IPsec VPN is abc, the wizard will create a DPD
named abc_dpd and apply it to peer abc_peer.
6. Click Next.
Figure 145 IPsec VPN policy configuration wizard: 4/4 (peer node)
7. Click Finish to complete the configuration.
The system jumps to the page that you can enter by selecting VPN > IPSec > IPSec Application from
the navigation tree.