Table of Contents
Advertisement
Description
Use the proposal command to specify the IPsec proposals for the IPsec policy or IPsec profile to reference.
Use the undo proposal command to remove an IPsec proposal reference by the IPsec policy or IPsec
profile.
By default, an IPsec policy or IPsec profile references no IPsec proposal.
The IPsec proposals must already exist.
A manual IPsec policy can reference only one IPsec proposal. To replace a referenced IPsec proposal, use
the undo proposal command to remove the original proposal binding and then use the proposal
command to reconfigure one.
Related commands: ipsec proposal and ipsec policy.
Examples
# Configure IPsec policy policy1 to reference IPsec proposal prop1.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] quit
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] proposal prop1
reset ipsec sa
Syntax
reset ipsec sa [ policy policy-name [ seq-number ] ]
View
User view
Default level
2: System level
Parameters
policy: Specifies an IPsec policy or IPsec profile.
policy-name: Name of the IPsec policy or IPsec profile, a case-sensitive string of 1 to 15 alphanumeric
characters.
seq-number: Sequence number of the IPsec policy, in the range 1 to 65535. If no seq-number is specified,
all the policies in the IPsec policy group named policy-name are specified.
Description
Use the reset ipsec sa command to clear specified or all IPsec SAs set up manually.
If no parameter is specified, all SAs will be cleared.
Once an SA set up manually is cleared, the system will automatically set up a new SA based on the
parameters of the IPsec policy.
As SAs appear in pairs, if you specify the parameters keyword to clear the SA in one direction, the SA in
the other direction will also be cleared.
Related commands: display ipsec sa.
257
Advertisement
Table of Contents
