Displaying And Maintaining Ipsec - H3C S5830V2 Security Configuration Manual

clear—Clears the DF bit in the new header.
•
• set—Sets the DF bit in the new header.
copy—Copies the DF bit in the original IP header to the new IP header.
•
You can configure the DF bit in system view and interface view. The interface-view DF bit setting takes
precedence over the system-view DF bit setting. If the interface-view DF bit setting is not configured, the
interface uses the system-view DF bit setting.
Follow these guidelines when you configure the DF bit:
The DF bit setting takes effect only in tunnel mode, and it changes the DF bit in the new IP header
•
rather than the original IP header.
Configure the same DF bit setting on the interfaces where the same IPsec policy bound to a source
•
interface has been applied.
To configure the DF bit of IPsec packets on an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the DF bit of
IPsec packets on the
interface.
To configure the DF bit of IPsec packets globally:
Step
1. Enter system view.
2. Configure the DF bit of
IPsec packets globally.

Displaying and maintaining IPsec

Execute display commands in any view and reset commands in user view.
Task
Display IPsec policy information.
Display IPsec policy template information.
Display IPsec profile information.
Display IPsec transform set information.
Command
system-view
interface interface-type
interface-number
ipsec df-bit { clear | copy | set }
Command
system-view
ipsec global-df-bit { clear | copy | set }
Command
display ipsec { ipv6-policy | policy } [ policy-name
[ seq-number ] ]
display ipsec { ipv6-policy-template | policy-template }
[ template-name [ seq-number ] ]
display ipsec profile [ profile-name ]
display ipsec transform-set [ transform-set-name ]
257
Remarks
N/A
N/A
By default, the interface uses the
global DF bit setting.
Remarks
N/A
By default, IPsec copies the DF bit
in the original IP header to the
new IP header.