Displaying And Maintaining Ipsec - HP 6125XLG Configuration Manual

Step
1. Enter system view.
2. Enter interface view.
3. Configure the DF bit of
IPsec packets on the
interface.
To configure the DF bit of IPsec packets globally:
Step
1. Enter system view.
2. Configure the DF bit of
IPsec packets globally.

Displaying and maintaining IPsec

Execute display commands in any view and reset commands in user view.
Task
Display IPsec policy information.
Display IPsec policy template information.
Display IPsec profile information.
Display IPsec transform set information.
Display IPsec SA information.
Display IPsec statistics.
Display IPsec tunnel information.
Clear IPsec SAs.
Clear IPsec statistics.
Command
system-view
interface interface-type
interface-number
ipsec df-bit { clear | copy | set }
Command
system-view
ipsec global-df-bit { clear | copy | set }
Command
display ipsec { ipv6-policy | policy } [ policy-name
[ seq-number ] ]
display ipsec { ipv6-policy-template | policy-template }
[ template-name [ seq-number ] ]
display ipsec profile [ profile-name ]
display ipsec transform-set [ transform-set-name ]
display ipsec sa [ brief | count | interface interface-type
interface-number | { ipv6-policy | policy } policy-name
[ seq-number ] | profile policy-name | remote [ ipv6 ]
ip-address ]
display ipsec statistics [ tunnel-id tunnel-id ]
display ipsec tunnel { brief | count | tunnel-id tunnel-id }
reset ipsec sa [ { ipv6-policy | policy } policy-name
[ seq-number ] | profile policy-name | remote
{ ipv4-address | ipv6 ipv6-address } | spi { ipv4-address |
ipv6 ipv6-address } { ah | esp } spi-num ]
reset ipsec statistics [ tunnel-id tunnel-id ]
215
Remarks
N/A
N/A
By default, the interface uses the
global DF bit setting.
Remarks
N/A
By default, IPsec copies the DF bit
in the original IP header to the
new IP header.