Maintaining Ipsec; Displaying The Ipsec Configuration; Clearing Ipsec Information - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
l
----End

4.5 Maintaining IPSec

This section describes how to display the IPSec configuration and clear the IPSec statistics.

4.5.1 Displaying the IPSec Configuration

You can run the following display commands to view information about the SA, established
IPSec tunnel, and statistics about IPSec packets.
Prerequisite
The configurations of IPSec are complete.
Procedure
l
l
l
l
----End

4.5.2 Clearing IPSec Information

This section describes how to clear the statistics about IPSec and IKE packets, information about
SAs, and information about the IPSec tunnels established through IKE negotiation.
Context
The statistics cannot be restored if cleared. So, use the following commands with caution.
Procedure
l
l
Issue 01 (2011-07-15)
Run the display ike proposal command to view the configuration of a specified IKE
proposal or all IKE proposals.
Run the display ipsec sa [ brief | duration | policy policy-name [ seq-number ] | peerip
peer-ip-address ] command to view information about the IPSec.
Run the display ike sa [ v2 ] [ conn-id connid | peer-name peername | phase phase-
number | verbose ] command to view information about the established IPSec tunnel.
Run the display ipsec statistics { ah | esp } command to view the statistics about IPSec
packets.
Run the display ike statistics { all | msg | v2 } command to view the statistics about IKE
packets.
CAUTION
Run the reset ipsec statistics { ah | esp } command in the user view to clear the statistics
about IPSec packets.
Run the reset ike statistics { all | msg } command in the user view to clear the statistics
about IKE packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 IPSec Configuration
129