ipv6 nd mac-check enable ································································································································· 305

ND detection configuration commands ····················································································································· 305

display ipv6 nd detection ··································································································································· 305

display ipv6 nd detection statistics ···················································································································· 306

ipv6 nd detection enable ···································································································································· 307

ipv6 nd detection trust ········································································································································ 308

reset ipv6 nd detection statistics ························································································································ 308

SAVI configuration commands ······························································································································· 310

ipv6 savi dad-delay ············································································································································ 310

ipv6 savi dad-preparedelay ······························································································································· 310

ipv6 savi down-delay ·········································································································································· 311

ipv6 savi strict ······················································································································································ 311

System-guard configuration commands ················································································································· 313

display system-guard ··········································································································································· 313

system-guard aging time ····································································································································· 314

system-guard control ··········································································································································· 314

system-guard detect-threshold ···························································································································· 315

system-guard enable ··········································································································································· 315

system-guard rate-limit ········································································································································· 316

FIPS configuration commands ································································································································ 317

fips mode enable ················································································································································· 317

display fips status ················································································································································ 317

fips self-test ··························································································································································· 318

IPsec configuration commands ······························································································································· 319

ah authentication-algorithm ································································································································ 319

connection-name ·················································································································································· 319

display ipsec policy ············································································································································ 320

display ipsec proposal ········································································································································ 323

display ipsec sa ··················································································································································· 324

display ipsec session ··········································································································································· 327

display ipsec statistics ········································································································································· 328

display ipsec tunnel ············································································································································· 330

encapsulation-mode ············································································································································ 331

esp authentication-algorithm ······························································································································ 332

esp encryption-algorithm ···································································································································· 332

ike-peer (IPsec policy view) ································································································································ 333

ipsec anti-replay check ······································································································································· 334

ipsec anti-replay window ··································································································································· 334

ipsec decrypt check ············································································································································· 335

ipsec policy (interface view) ······························································································································· 335

ipsec policy (system view) ·································································································································· 336

ipsec proposal ····················································································································································· 337

ipsec sa global-duration ····································································································································· 338

ipsec session idle-time ········································································································································· 338

pfs ········································································································································································· 339

policy enable ······················································································································································· 340

proposal (IPsec policy view) ······························································································································· 340

qos pre-classify ···················································································································································· 341

reset ipsec sa ······················································································································································· 342

reset ipsec session ··············································································································································· 343

reset ipsec statistics ············································································································································· 343

sa authentication-hex ·········································································································································· 344

viii