544ipsec applyipsec { ipv6-policy | policy } isakmp templateUse ipsec { ipv6-policy | policy } isakmp template to create an IKE-based IPsec policy entry byusing an IPsec policy template.Use undo ipsec { ipv6-policy | policy } to delete the specified IPsec policy.Syntaxipsec { ipv6-policy | policy } policy-name seq-number isakmp template template-nameundo ipsec { ipv6-policy | policy } policy-name [ seq-number ]DefaultNo IPsec policies exist.ViewsSystem viewPredefined user rolesnetwork-adminParametersipv6-policy: Specifies an IPv6 IPsec policy.policy: Specifies an IPv4 IPsec policy.policy-name: Specifies a name for the IPsec policy, a case-insensitive string of 1 to 63 characters.seq-number: Specifies a sequence number for the IPsec policy, in the range of 1 to 65535. A smallernumber indicates a higher priority.isakmp template template-name: Specifies an IPsec policy template by its name, a case-insensitivestring of 1 to 63 characters.Usage guidelinesIf you do not specify the seq-number argument, the undo command deletes the specified IPsecpolicy.An interface applied with an IPsec policy that is configured by using an IPsec policy template cannotinitiate an SA negotiation, but it can respond to a negotiation request. The parameters not defined inthe template are determined by the initiator. When the remote end's information (such as the IPaddress) is unknown, this method allows the remote end to initiate negotiations with the local end.Examples# Create an IPsec policy entry by using the IPsec policy template temp1, and specify the IPsecpolicy name as policy2 and the sequence number as 200. system-view[Sysname] ipsec policy policy2 200 isakmp template temp1Related commandsdisplay ipsec { ipv6-policy | policy }ipsec { ipv6-policy-template | policy-template }ipsec { ipv6-policy | policy } local-addressUse ipsec { ipv6-policy | policy } local-address to bind an IPsec policy to a source interface.
