Displaying And Maintaining Ipsec; Ipsec Configuration Example; Example For Establishing Sas In Manual Mode - 3Com MSR 50 Series Configuration Manual

1890 C 100: IPS
HAPTER EC
Displaying and
Maintaining IPSec
IPSec Configuration
Example
Example for Establishing
SAs in Manual Mode
C
ONFIGURATION
To do...
Enable fast forwarding for
encryption card
To do...
Display the encryption card
fast forwarding entries
Display IPSec policy
information
Display IPSec policy
template information
Display IPSec proposal
information
Display IPSec SA
information
Display IPSec session
information
Display IPSec packet
statistics
Display IPSec tunnel
information
Clear encryption card fast
forwarding entries
Clear SAs
Clear IPSec session
Clear IPSec statistics
Network requirements
An IPSec tunnel is established between Router A and Router B to protect data
■
flows between subnet 10.1.1.0/24 (represented by Host A) and subnet
10.1.2.0/24 (represented by Host B).
The security protocol to be used is ESP, encryption algorithm is DES, and
■
authentication algorithm is SHA1-HMAC-96.
Use the command...
encrypt-card fast-switch
Use the command...
display encrypt-card fast-switch
display ipsec policy [ brief | name
policy-name [ seq-number ] ]
display ipsec policy-template [ brief |
name template-name [ seq-number ] ]
display ipsec proposal [ proposal-name ] Available in any
display ipsec sa [ brief | duration |
policy policy-name [ seq-number ] |
remote ip-address ]
display ipsec session [ tunnel-id integer ] Available in any
display ipsec statistics
display ipsec tunnel
reset encrypt-card fast-switch
reset ipsec sa [ parameters dest-address
protocol spi | policy policy-name
[ seq-number ] | remote ip-address ]
reset ipsec session [ tunnel-id integer ]
reset ipsec statistics
Remark
Required
Disabled by default
Remarks
Available in any
view
Available in any
view
Available in any
view
view
Available in any
view
view
Available in any
view
Available in any
view
Available in user
view
Available in user
view
Available in user
view
Available in user
view