proposal

Use this command to assign an IKE proposal to the IKE policy.

Syntax

proposal proposal-identifier
no proposal proposal-identifier

Parameters

proposal-identifier Specifies the IKE proposal to assign to the IKE policy. Valid value is up to 32 alpha-numeric characters plus special characters dash (-) and underscore (_).

Defaults

None.

Mode

IKE policy configuration.

Usage

The proposal assigned to an IKE policy is the quick mode or data protection proposal. Quick mode negotiates on behalf of the IPsec SAs. During Quick mode, keying material is refreshed or, if necessary, new keys are generated. The quick mode proposal assigned to the IKE policy can be the same proposal assigned to main mode or it can be a different one.

Use the “no” option for this command to remove the IKE proposal from the IKE policy configuration.

Example

This example shows how to assign the winRadius_quick IKE proposal to the winRadius IKE policy:

System(su-config)->crypto ike-policy winRadius
System(su-crypto-policy)->proposal winRadius_quick
System(su-crypto-policy)->