Displaying And Maintaining Ipsec; Ipsec Configuration Examples; Ike-Based Ipsec Tunnel For Ipv4 Packets Configuration Example - HP 5120 SI Series Security Configuration Manual

Step
2. Enter IPsec policy view.
3. Enable packet information
pre-extraction.

Displaying and maintaining IPsec

To do...
Display IPsec policy information
Display IPsec proposal
information
Display IPsec SA information
Display IPsec session information
Display IPsec packet statistics
Display IPsec tunnel information
Clear SAs
Clear IPsec sessions
Clear IPsec statistics

IPsec configuration examples

IKE-based IPsec tunnel for IPv4 packets configuration example

Network requirements
As shown in
between Switch A and Switch B. Configure the tunnel to use the security protocol ESP, the encryption
algorithm AES-CBC- 1 28, and the authentication algorithm HMAC-SHA1-96.
Use the command...
display ipsec policy [ brief | name
policy-name [ seq-number ] ] [ | { begin |
exclude | include } regular-expression ]
display ipsec proposal [ proposal-name ]
[ | { begin | exclude | include }
regular-expression ]
display ipsec sa [ brief | policy
policy-name [ seq-number ] | remote
ip-address ] [ | { begin | exclude |
include } regular-expression ]
display ipsec session [ tunnel-id integer ]
[ | { begin | exclude | include }
regular-expression ]
display ipsec statistics [ tunnel-id
integer ] [ | { begin | exclude | include }
regular-expression ]
display ipsec tunnel [ | { begin | exclude
| include } regular-expression ]
reset ipsec sa [ parameters dest-address
protocol spi | policy policy-name
[ seq-number ] | remote ip-address ]
reset ipsec session [ tunnel-id integer ]
reset ipsec statistics
Figure 123, configure an IPsec tunnel between Switch A and Switch B to protect data flows
Command
ipsec policy policy-name
seq-number [ isakmp | manual ]
qos pre-classify
352
Remarks
Configure either command.
Disabled by default.
Remarks
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in any view.
Available in user view.
Available in user view.
Available in user view.