Displaying And Debugging Encryption Card Information - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Table 7-32 Clear IPSec packet statistics
Clear IPSec packet statistical information
III. Deleting SA
The configuration is used to delete the established SA (either manually or through IKE
negotiation). If no parameter is specified, all the SAs will be deleted.
Perform the following configuration in user view.
Table 7-33 Delete SA
Operation
Delete SA
If a packet re-triggers IKE negotiation after an SA set up through IKE negotiation is
deleted, IKE will reestablish an SA through negotiation.
If an SA set up manually is deleted, the system will automatically set up a new SA
according to the parameter manually set up.
The keyword parameters will take effect only after the spi of the outbound SA is
defined. Because SAs appear in pairs, the inbound SA will also be deleted after the
outbound SA is deleted.

7.3.2 Displaying and Debugging Encryption Card Information

I. Displaying and debugging IPSec information on encryption cards
You can view the IPSec configurations, including SA information, statistics, log,
interface information and IPSec module backup function, on the encryption card using
display commands.
Execute the debugging command in user view for the debugging of IPSec
configuration.
Table 7-34 Display and debug encryption card configuration
Display SA information on the
encryption card
Display statistics on the encryption
card
Operation
reset ipsec sa [ remote ip-address | policy policy-name
[ seq-number ] | parameters dest-address protocol spi ]
Operation
3Com Corporation
7-28
Chapter 7 IPSec Configuration
reset ipsec statistics
Command
Command
display encrypt-card sa [slot-id ]
display encrypt-card statistics [slot-id ]
Command