H3C S6550X-HI Series Command Reference Manual page 2224

Contents
IPsec commands ··························································································· 1
ah authentication-algorithm ························································································································ 1
description ·················································································································································· 2
display ipsec { ipv6-policy | policy } ············································································································ 2
display ipsec { ipv6-policy-template | policy-template } ·············································································· 8
display ipsec profile ·································································································································· 10
display ipsec sa ········································································································································ 12
display ipsec statistics ······························································································································ 16
display ipsec transform-set ······················································································································ 18
display ipsec tunnel ·································································································································· 19
encapsulation-mode ································································································································· 22
esn enable ················································································································································ 23
esp authentication-algorithm ···················································································································· 23
esp encryption-algorithm ·························································································································· 24
ike-profile ·················································································································································· 26
ikev2-profile ·············································································································································· 27
ipsec { ipv6-policy | policy } ······················································································································ 27
ipsec { ipv6-policy | policy } isakmp template ··························································································· 29
ipsec { ipv6-policy | policy } local-address ································································································ 30
ipsec { ipv6-policy-template | policy-template } ························································································ 31
ipsec anti-replay check ····························································································································· 32
ipsec anti-replay window ·························································································································· 32
ipsec apply ··············································································································································· 33
ipsec decrypt-check enable ······················································································································ 34
ipsec df-bit ················································································································································ 34
ipsec fragmentation ·································································································································· 35
ipsec global-df-bit ····································································································································· 36
ipsec limit max-tunnel ······························································································································· 37
ipsec logging negotiation enable ·············································································································· 37
ipsec logging packet enable ····················································································································· 38
ipsec profile ·············································································································································· 39
ipsec redundancy enable ························································································································· 39
ipsec sa global-duration ··························································································································· 40
ipsec sa global-soft-duration buffer ·········································································································· 41
ipsec sa idle-time ····································································································································· 42
ipsec transform-set ··································································································································· 43
local-address ············································································································································ 44
pfs ···························································································································································· 44
policy enable ············································································································································ 45
protocol ···················································································································································· 46
qos pre-classify ········································································································································ 47
redundancy replay-interval ······················································································································· 47
remote-address ········································································································································ 48
reset ipsec sa ··········································································································································· 49
reset ipsec statistics ································································································································· 51
reverse-route dynamic ····························································································································· 51
reverse-route preference ·························································································································· 53
reverse-route tag ······································································································································ 53
sa df-bit ···················································································································································· 54
sa duration ··············································································································································· 55
sa hex-key authentication ························································································································ 56
sa hex-key encryption ······························································································································ 57
sa idle-time ··············································································································································· 59
sa soft-duration buffer ······························································································································ 59
sa spi ························································································································································ 60
sa string-key ············································································································································· 61
sa trigger-mode ········································································································································ 63
i