H3C S6550X-HI Series Command Reference Manual page 2290

[ ]
Sysname
[
Sysname-acl-ipv4-adv-3001
10.1.2.0 0.0.0.255
[
Sysname-acl-ipv4-adv-3001
[ ]
Sysname
[
Sysname-ipsec-policy-manual-policy1-100
# Specify IPv4 advanced ACL 3002 for IPsec policy policy2 and specify the data protection mode as
aggregation.
<Sysname> system-view
[ ]
Sysname
[
Sysname-acl-ipv4-adv-3002
10.1.2.2 0.0.0.255
[
Sysname-acl-ipv4-adv-3002
10.1.3.2 0.0.0.255
[
Sysname-acl-ipv4-adv-3002
[ ]
Sysname
[
Sysname-ipsec-policy-isakmp-policy2-1
Related commands
display ipsec sa
display ipsec tunnel
snmp-agent trap enable ipsec
Use
snmp-agent trap enable ipsec
Use
undo snmp-agent trap enable ipsec
Syntax
snmp-agent trap enable ipsec [ auth-failure
connection-stop
invalid-sa-failure | no-sa-failure | policy-add |
policy-delete | policy-detach | tunnel-start | tunnel-stop] *
undo snmp-agent trap enable ipsec [ auth-failure | connection-start |
connection-stop
invalid-sa-failure | no-sa-failure | policy-add |
policy-delete | policy-detach | tunnel-start | tunnel-stop] *
Default
All SNMP notifications for IPsec are disabled.
Views
System view
Predefined user roles
network-admin
Parameters
auth-failure
connection-start
tunnel under IPsec policy entries with the same description.
acl advanced 3001
]
rule permit tcp source 10.1.1.0 0.0.0.255 destination
]
quit
ipsec policy policy1 100 manual
acl advanced 3002
]
rule 0 permit ip source 10.1.2.1 0.0.0.255 destination
]
rule 1 permit ip source 10.1.3.1 0.0.0.255 destination
]
quit
ipsec policy policy2 1 isakmp
| decrypt-failure
| decrypt-failure
: Specifies notifications about authentication failures.
: Specifies notifications about successful establishment of the first IPsec
]
security acl 3001
]
security acl 3002 aggregation
command to enable SNMP notifications for IPsec.
command to disable SNMP notifications for IPsec.
| encrypt-failure
| encrypt-failure
65
| connection-start |
| global
policy-attach |
| global
policy-attach |
|
|