Use this command to assign an IKE proposal to the IKE policy.
proposal-identifier | Specifies the IKE proposal to assign to the IKE policy. Valid value is up to 32 alpha-numeric characters plus special characters dash (-) and underscore (_). |
None.
IKE policy configuration.
The proposal assigned to an IKE policy is the quick mode or data protection proposal. Quick mode negotiates on behalf of the IPsec SAs. During Quick mode, keying material is refreshed or, if necessary, new keys are generated. The quick mode proposal assigned to the IKE policy can be the same proposal assigned to main mode or it can be a different one.
Use the “no” option for this command to remove the IKE proposal from the IKE policy configuration.
This example shows how to assign the winRadius_quick IKE proposal to the winRadius IKE policy:
System(su-config)->crypto ike-policy winRadius System(su-crypto-policy)->proposal winRadius_quick System(su-crypto-policy)->