H3C S6550X-HI Series Command Reference Manual page 2279

Default
The route tag value is 0 for the static routes created by IPsec RRI.
Views
IPsec policy view
IPsec policy template view
Predefined user roles
network-admin
Parameters
tag-value
Usage guidelines
The tag value set by this command helps in implementing flexible route control through routing
policies.
When you change this tag value in an IPsec policy, the device deletes all IPsec SAs created by this
IPsec policy, and all associated static routes.
Examples
# Set the tag value to 50 for the static routes created by IPsec RRI.
<Sysname>system-view
[ ]
Sysname
[
Sysname-ipsec-policy-isakmp-1-1
Related commands
ipsec policy
ipsec policy-template
sa df-bit
Use
sa df-bit
Use
undo sa df-bit
Syntax
sa df-bit { clear | copy | set }
undo sa df-bit
Default
The DF bit is not configured for the outer IP header of IPsec packets. The interface-specific or global
DF bit setting is used.
Views
IPsec policy view
IPsec policy template view
IPsec profile view
Predefined user roles
network-admin
Parameters
: Clears the DF bit in the outer IP header. IPsec packets can be fragmented.
clear
: Specifies a tag value. The value range is 1 to 4294967295.
ipsec policy 1 1 isakmp
to configure the DF bit for the outer IP header of IPsec packets.
to restore the default.
]
reverse-route tag 50
54