Reverse-Route Dynamic - HP MSR Series Command Reference Manual

Parameters
tunnel-id tunnel-id: Clears IPsec packet statistics for the specified IPsec tunnel. The value range for the
tunnel-id is 0 to 4294967295. If you do not specify this option, the command clears all IPsec packet
statistics.
Examples
# Clear IPsec packet statistics.
<Sysname> reset ipsec statistics
Related commands
display ipsec statistics

reverse-route dynamic

Use reverse-route dynamic to enable the IPsec reverse route inject (RRI) feature.
Use undo reverse-route dynamic to disable IPsec RRI.
Syntax
reverse-route dynamic
undo reverse-route dynamic
Default
IPsec RRI is disabled.
Views
IPsec policy view, IPsec policy template view
Predefined user roles
network-admin
Usage guidelines
IPsec RRI is usually used on a gateway device at the headquarters side in an IPsec VPN.
After IPsec RRI is enabled for an IPsec policy or an IPsec policy template on a gateway device, the
gateway device automatically creates a static route when an IPsec SA is created according to this IPsec
policy or IPsec policy template.
In the static route, the destination IP address is the protected peer private network, and the next hop is the
IP address of the remote tunnel interface.
When you enable or disable IPsec RRI for an IPsec policy, the device deletes all IPsec SAs that are created
according to this IPsec policy, and the associated static routes.
To display the static routes created by RRI, use the display ip routing-table command.
Examples
# Enable IPsec RRI to create a static route according to the IPsec SA negotiated by the specified IPsec
policy. The destination IP address is the protected peer private network 3.0.0.0/24, and the next hop is
the IP address (1.1.1.2) of the remote tunnel interface.
<Sysname> system-view
[Sysname] ipsec policy 1 1 isakmp
[Sysname-ipsec-policy-isakmp-1-1] reverse-route dynamic
[Sysname-ipsec-policy-isakmp-1-1] quit
338