Configuring Snmp Notifications For Ipsec; Displaying And Maintaining Ipsec - HP MSR2000 Configuration Manual

Configuring SNMP notifications for IPsec

After you enable SNMP notifications for IPsec, the IPsec module notifies the NMS of important events of
the module. The notifications are sent to the SNMP module of the device. You can decide how the SNMP
module outputs notifications by configuring the notification transmission parameters for the SNMP
module. For more information about SNMP notifications, see Network Management and Monitoring
Configuration Guide.
To generate and output SNMP notifications for IPsec for a specific type of failures or events, enable
SNMP notifications for IPsec globally and for the specified type of failures or events.
To configure SNMP notifications for IPsec:
Step
1. Enter system view
2. Enable SNMP notifications
for IPsec globally.
3. Enable SNMP notifications
for the specified type of
failures or events.

Displaying and maintaining IPsec

Execute display commands in any view and reset commands in user view.
Task
Display IPsec policy information.
Display IPsec policy template information.
Display IPsec profile information.
Display IPsec transform set information.
Display IPsec SA information.
Display IPsec statistics.
Display IPsec tunnel information.
Clear IPsec SAs.
Command
system-view
snmp-agent trap enable ipsec global
snmp-agent trap enable ipsec
[ auth-failure | decrypt-failure |
encrypt-failure | invalid-sa-failure |
no-sa-failure | policy-add |
policy-attach | policy-delete |
policy-detach | tunnel-start |
tunnel-stop ] *
Command
display ipsec { ipv6-policy | policy } [ policy-name
[ seq-number ] ]
display ipsec { ipv6-policy-template | policy-template }
[ template-name [ seq-number ] ]
display ipsec profile [ profile-name ]
display ipsec transform-set [ transform-set-name ]
display ipsec sa [ brief | count | interface interface-type
interface-number | { ipv6-policy | policy } policy-name
[ seq-number ] | profile policy-name | remote [ ipv6 ]
ip-address ]
display ipsec statistics [ tunnel-id tunnel-id ]
display ipsec tunnel { brief | count | tunnel-id tunnel-id }
reset ipsec sa [ { ipv6-policy | policy } policy-name
[ seq-number ] | profile policy-name | remote
{ ipv4-address | ipv6 ipv6-address } | spi { ipv4-address |
ipv6 ipv6-address } { ah | esp } spi-num ]
160
Remarks
N/A
By default, SNMP notifications for
IPsec are enabled.
By default, SNMP notifications for
all types of failures and events are
enabled.