Ipsec Profile (System View) - H3C MSR 20-20 Command Reference Manual

1740 C 101: IPS
HAPTER EC

ipsec profile (system view)

Syntax
View
Parameter
Description
P C C
ROFILE ONFIGURATION OMMANDS
inbound ESP setting:
ESP spi: 23456 (0x5ba0)
ESP string-key:
ESP encryption hex key:
ESP authentication hex key: 1234567890abcdef1234567890abcdef
outbound ESP setting:
ESP spi: 65432 (0xff98)
ESP string-key:
ESP encryption hex key:
ESP authentication hex key: 11223344556677889900aabbccddeeffIPsec
Table 466 Description on the fields of the display ipsec profile command
Field
IPsec profile name
mode
tunnel local address
tunnel remote address
perfect forward secrecy
proposal name
ipsec sa local duration(time based)
ipsec sa local duration(traffic based)
inbound ESP setting
outbound ESP setting
ESP spi
ESP string-key
ESP encryption hex key
ESP authentication hex key
ipsec profile profile-name
undo ipsec profile profile-name
System view
profile-name: Name of the IPSec profile, a case-insensitive string of 1 to 15
characters.
Use the
ipsec profile
Use the undo ipsec profile
By Default, no IPSec profile exists.
Note that:
1234567890abcdef1234567890abcdef1234567812345678
11223344556677889900aabbccddeeff1234567812345678
Description
Name of the IPSec profile
Tunneling mode used by the IPSec profile
Local address of the tunnel
Remote address of the tunnel
PFS feature that is configured
IPSec proposal referenced by the IPSec profile
Local time-based SA lifetime
Local traffic-based SA lifetime
ESP settings in the inbound direction
ESP settings in the outbound direction
Security parameter index (SPI) of the SA using ESP
Key of the SA using ESP
Encryption key of the SA using ESP, in
hexadecimal.
Authentication key of the SA using ESP, in
hexadecimal.
command to create an IPSec profile and enter its view.
command to remove a specified IPSec profile.