Displaying And Maintaining Ipsec; Ipsec Configuration Examples; Ike-Based Ipsec Tunnel For Ipv4 Packets Configuration Example - HP 5500 HI Series Configuration Manual

Task
Applying an IPsec policy to an IPv6 routing
protocol

Displaying and maintaining IPsec

To do...
Display IPsec policy information
Display IPsec proposal
information
Display IPsec SA information
Display IPsec session information
Display IPsec packet statistics
Display IPsec tunnel information
Clear SAs
Clear IPsec sessions
Clear IPsec statistics

IPsec configuration examples

IKE-based IPsec tunnel for IPv4 packets configuration example

Network requirements
As shown in
between Switch A and Switch B. Configure the tunnel to use the security protocol ESP, the encryption
algorithm AES-CBC- 1 28, and the authentication algorithm HMAC-SHA1-96.
Use the command...
display ipsec policy [ brief | name
policy-name [ seq-number ] ] [ | { begin |
exclude | include } regular-expression ]
display ipsec proposal [ proposal-name ]
[ | { begin | exclude | include }
regular-expression ]
display ipsec sa [ brief | policy
policy-name [ seq-number ] | remote
ip-address ] [ | { begin | exclude |
include } regular-expression ]
display ipsec session [ tunnel-id integer ]
[ | { begin | exclude | include }
regular-expression ]
display ipsec statistics [ tunnel-id
integer ] [ | { begin | exclude | include }
regular-expression ]
display ipsec tunnel [ | { begin | exclude
| include } regular-expression ]
reset ipsec sa [ parameters dest-address
protocol spi | policy policy-name
[ seq-number ] | remote ip-address ]
reset ipsec session [ tunnel-id integer ]
reset ipsec statistics
Figure 85, configure an IPsec tunnel between Switch A and Switch B to protect data flows
Remarks
Required
See Layer 3—IP Routing Configuration Guide.
281
Remarks
Available in any view.
Available in any view.
Available in any view.
Available in any view.
This command is supported
only in FIPS mode.
Available in any view.
Available in any view.
Available in user view.
Available in user view.
This command is supported
only in FIPS mode.
Available in user view.