H3C MSR Series Command Reference Manual page 13

pki domain ····················································································································· 479
pki entity ························································································································ 480
pki export ······················································································································· 481
pki import ······················································································································· 488
pki request-certificate ······································································································· 492
pki retrieve-certificate ······································································································· 493
pki retrieve-crl ················································································································· 494
pki storage ····················································································································· 495
pki validate-certificate ······································································································· 496
public-key dsa ················································································································ 498
public-key ecdsa ············································································································· 499
public-key rsa ················································································································· 501
root-certificate fingerprint ·································································································· 502
rule······························································································································· 503
source ··························································································································· 504
state ····························································································································· 505
subject-dn ······················································································································ 506
usage ··························································································································· 507
vpn-instance ··················································································································· 508
IPsec commands ········································································· 509
ah authentication-algorithm ······························································································· 509
description ····················································································································· 510
display ipsec { ipv6-policy | policy } ······················································································ 511
display ipsec { ipv6-policy-template | policy-template } ····························································· 516
display ipsec profile ········································································································· 518
display ipsec sa ·············································································································· 519
display ipsec statistics ······································································································ 523
display ipsec transform-set ································································································ 525
display ipsec tunnel ········································································································· 526
encapsulation-mode ········································································································· 529
esn enable ····················································································································· 530
esp authentication-algorithm ······························································································ 530
esp encryption-algorithm ··································································································· 532
ike-profile ······················································································································· 534
ikev2-profile ··················································································································· 535
ipsec anti-replay check ····································································································· 536
ipsec anti-replay window ··································································································· 536
ipsec apply ····················································································································· 537
ipsec decrypt-check enable ······························································································· 538
ipsec df-bit ····················································································································· 538
ipsec fragmentation ········································································································· 539
ipsec global-df-bit ············································································································ 540
ipsec limit max-tunnel ······································································································· 541
ipsec logging negotiation enable ························································································· 541
ipsec logging packet enable ······························································································· 542
ipsec { ipv6-policy | policy } ································································································ 542
ipsec { ipv6-policy | policy } isakmp template ········································································· 544
ipsec { ipv6-policy | policy } local-address ············································································· 544
ipsec { ipv6-policy-template | policy-template } ······································································· 545
ipsec profile ···················································································································· 546
ipsec redundancy enable ·································································································· 547
ipsec sa global-duration ···································································································· 548
ipsec sa idle-time ············································································································ 549
ipsec transform-set ·········································································································· 550
local-address ·················································································································· 550
pfs································································································································ 551
protocol ························································································································· 552
qos pre-classify ··············································································································· 553
redundancy replay-interval ································································································ 553
remote-address ··············································································································· 554
reset ipsec sa ················································································································· 556
viii