Clear Crypto Sa Counters; Crypto Ipsec Df-Bit - Avaya G450 Cli Reference Manual

clear crypto sa counters

Use the clear crypto sa counters command to clear the crypto SA counters.
Syntax
clear crypto sa counters
User Level
read-write
Context
general
Example
To clear crypto SA counters:
G450-001(super)# clear crypto sa counters
Related Commands
clear crypto isakmp,
show crypto isakmp
crypto isakmp sa,

crypto ipsec df-bit

Use the crypto ipsec df-bit command to set the Don't-Fragment bit to one of the
following modes:
clear — the DF bit of the encapsulated packet is never set, and PMTUD is not
●
maintained for the IPSec tunnel. Packets traversing an IPSec tunnel are pre-fragmented
according to the MTU of the SA, regardless of their DF bit. In case packets are
fragmented, the DF bit is copied to every fragment of the original packet.
copy — the DF bit of the encapsulated packet is copied from the original packet, and Path
●
MTU Discovery (PMTUD) is maintained for the IPSec tunnel.
Use the no form of the command to restore the Don't-Fragment bit to the default value:
Syntax
[no] crypto ipsec df-bit {clear | copy}
clear crypto sa, show crypto ipsec
peer, show crypto isakmp
show crypto map, show ip
sa, show crypto ipsec
peer-group, show crypto isakmp
active-lists, show ip crypto-list
transform-set,
policy, show
copy
Issue 1 January 2008
VPN
.
1205