H3C MSR Series Command Reference Manual page 14

reset ipsec statistics ········································································································· 557
reverse-route dynamic ······································································································ 557
reverse-route preference ··································································································· 559
reverse-route tag ············································································································· 559
sa duration ····················································································································· 560
sa hex-key authentication ·································································································· 561
sa hex-key encryption ······································································································ 562
sa idle-time ···················································································································· 564
sa spi ···························································································································· 565
sa string-key ··················································································································· 566
security acl ····················································································································· 567
snmp-agent trap enable ipsec ···························································································· 568
tfc enable ······················································································································· 569
transform-set ·················································································································· 570
tunnel protection ipsec ······································································································ 571
IKE commands ············································································ 573
aaa authorization ············································································································· 573
authentication-algorithm ···································································································· 574
authentication-method ······································································································ 575
certificate domain ············································································································ 576
client-authentication ········································································································· 577
description ····················································································································· 578
dh ································································································································ 578
display ike proposal ········································································································· 579
display ike sa ·················································································································· 580
display ike statistics ········································································································· 584
dpd······························································································································· 585
encryption-algorithm ········································································································ 585
exchange-mode ·············································································································· 587
ike address-group ············································································································ 588
ike dpd ·························································································································· 589
ike identity ····················································································································· 590
ike invalid-spi-recovery enable ··························································································· 591
ike keepalive interval ········································································································ 591
ike keepalive timeout ········································································································ 592
ike keychain ··················································································································· 593
ike limit ·························································································································· 594
ike logging negotiation enable ···························································································· 594
ike nat-keepalive ············································································································· 595
ike profile ······················································································································· 595
ike proposal ··················································································································· 596
ike signature-identity from-certificate···················································································· 597
inside-vpn ······················································································································ 598
keychain ························································································································ 598
local-identity ··················································································································· 599
match local address (IKE keychain view) ·············································································· 600
match local address (IKE profile view)·················································································· 601
match remote ················································································································· 602
pre-shared-key ··············································································································· 603
priority (IKE keychain view) ······························································································· 605
priority (IKE profile view) ··································································································· 605
proposal ························································································································ 606
reset ike sa ···················································································································· 607
reset ike statistics ············································································································ 607
sa duration ····················································································································· 608
snmp-agent trap enable ike ······························································································· 608
IKEv2 commands ········································································· 611
aaa authorization ············································································································· 611
address ························································································································· 612
authentication-method ······································································································ 612
ix