Displaying And Debugging Dvpn; Configuration Example - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Restore the default lifetime
The default lifetime of the IPSec SA is 3,600 seconds.

4.2.6 Displaying and Debugging DVPN

Execute the display commands in any view to display how DVPN operates.
Execute the reset commands in user view to clear sessions, maps, statistics, or
initialize a DVPN domain.
Execute the debugging command in user view to debug DVPN.
Table 4-33 Display and debug DVPN
Enable/disable debugging for DVPN
Display
domains or information about a specified
DVPN domain
Display information about maps in a
DVPN domain
Display information about sessions in a
DVPN domain
Display information about one or all
IPSec SAs in a DVPN domain
Display information about online DVPN
users
Initialize a DVPN domain
Clear a specified map
Clear a specified session
Clear DVPN statistics

4.3 Configuration Example

4.3.1 Configuration Example for DVPN with NAT Traversal
Operation
Operation
statistics about all
3Com Corporation
undo data
time-base
[ undo ] debugging dvpn { all | error |
event { all | register | session | misc } |
hexadecimal | packet { all | control |
data | ipsec } }
DVPN
display dvpn info { dvpn-id dvpn-id |
global }
display dvpn map { all | dvpn-id
dvpn-id | public-ip public-ip }
display dvpn session { all | dvpn-id
dvpn-id [ private-ip private-ip ] }
display dvpn ipsec-sa { all | dvpn-id
dvpn-id }
display dvpn online-user
reset dvpn all dvpn-id
reset dvpn
[ control-id ]
reset dvpn session dvpn-id private-ip
reset dvpn statistics
4-24
Chapter 4 DVPN
Command
ipsec-sa duration
Command
map ip-address port