Reset Ipsec Statistics; Reverse-Route - HPE FlexNetwork HSR6800 Security Command Reference

# Clear all IPsec SAs of IPsec profile policy1.
<Sysname> reset ipsec sa policy policy1
Related commands
display ipsec sa

reset ipsec statistics

Use reset ipsec statistics to clear IPsec packet statistics.
Syntax
reset ipsec statistics
Views
User view
Default command level
1: Monitor level
Examples
# Clear IPsec packet statistics.
<Sysname> reset ipsec statistics
Related commands
display ipsec statistics

reverse-route

Use reverse-route to enable and configure the IPsec Reverse Route Inject (RRI) feature.
Use undo reverse-route to disable IPsec RRI.
Syntax
reverse-route [ remote-peer ip-address [ gateway | static ] | static ]
undo reverse-route
Default
IPsec RRI is disabled.
Views
IPsec policy view, IPsec policy template view
Default command level
2: System level
Parameters
static: Enables static IPsec Reverse Route Inject (RRI). Static IPsec RRI creates static routes based
on the ACL that the IPsec policy references. This keyword is available only in IPsec policy view. If this
keyword is not specified, you enable dynamic IPsec RRI, which creates static routes based on IPsec
SAs.
remote-peer ip-address: Specifies a next hop for the static routes. To use the static routes for route
backup and load balancing, specify this option.
gateway: Creates two recursive routes: one to the remote tunnel endpoint and the other to the
protected remote private network. Use the gateway keyword in an IKE-enabled IPsec policy to
define an explicit default forwarding path for IPsec traffic.
287