3Com 3032 Configuration Manual page 580

576 C 40: C
HAPTER ONFIGURING
Displaying and
Debugging the NDEC
Car
IPS
EC
Table 653 Display and Debug IPSec
Operation
Display all created SA (applicable to IPSec
software)
Display all SA information briefly
(applicable to IPSec software)
Display the specific SA information
(applicable to IPSec software)
Display global SA lifetime (applicable to
IPSec software)
Display SA established with specific peer
ends (applicable to IPSec software)
Display all security policy base information
(applicable to IPSec software)
Display statistic information related to
security message (applicable to IPSec
software)
Display configured IPSec proposal
(applicable to IPSec software)
Display all security policy base information
(applicable to IPSec software)
Display brief security policy base
information (applicable to IPSec software)
Display all security policy base information
by name (applicable to IPSec software)
Clear all SA (applicable to IPSec software) reset ipsec sa all
Clear specific SA information (applicable
to IPSec software)
Clear SA of the specified security policy
base (applicable to IPSec software)
Clear SA established with specified peer
ends (applicable to IPSec software)
Clear statistic information related to
security messages (applicable to IPSec
software)
information debugging related to IPSec
(applicable to IPSec software)
Resetting the crypto card
When the crypto card operates abnormally, resetting the crypto card can be used
d
to restore the crypto card to normality. When resetting the crypto card, the crypto
card restores its initialization. At the same time, the host retransmits the card's
configured information and SA information being used to the crypto card. In
addition, the host automatically resets the crypto card when it finds that the
crypto card operates abnormally.
Configure the following in the system view:
Table 654 Reset crypto card
Operation
Reset crypto card (applicable to crypto
card)
Command
display ipsec sa all
display ipsec sa brief
display ipsec sa parameters
dest-address protocol spi
display ipsec sa duration
display ipsec sa remote ip-address
display ipsec sa policy policy-name [
sequence-number ]
display ipsec statistics
display ipsec proposal [
proposal-name ]
display ipsec policy all
display ipsec policy brief
display ipsec policy name policy-name
[ sequence-number ]
reset ipsec sa parameters
dest-address protocol spi
reset ipsec sa policy policy-name [
sequence-number ]
reset ipsec sa remote ip-address
reset ipsec statistics
debugging ipsec { sa | packet | misc }
Command
encrypt-card reset [ slot-id ]