Displaying And Debugging Ike - H3C SecPath F1800-A Operation Manual

Operation Manual - VPN
H3C SecPath F1800-A Firewall
Table 3-37 Displaying and debugging IPSec
View IPSec SA.
View statistics
processed by IPSec.
View IPSec proposal.
View IPSec policy.
View IPSec policy template.
Debug IPSec.
Disable IPSec debugging.

3.3.2 Displaying and Debugging IKE

Using the following commands, you can view all the current SAs and parameters set
for each IKE proposal.
You can use the display command in any view to view the running state of the IKE
configuration and to verify the configuration of IKE.
You can use the debugging command in user view to debug IKE.
You can use the reset command in user view to delete security channel.
Table 3-38 Displaying and debugging IKE
View an existing security channel.
View the configuration of IKE peer.
Delete an existing security channel.
View the parameters of each IKE
proposal configuration.
Action
display ipsec sa [ brief | remote ip-address |
policy policy-name [ seq-number ] | duration ]
[ secp [ slot/card/port ] ]
of packets
display ipsec statistics [ secp [ slot/card/port ] ]
display ipsec proposal [ name proposal-name ]
[ secp [ slot/card/port ] ]
display ipsec policy [ brief | name policy-name
[ seq-number ] ] [ secp [ slot/card/port ] ]
display ipsec policy-template [ brief | name
policy-name
[ slot/card/port ] ]
debugging ipsec { all | sa | packet [ policy
policy-name [ seq-number ] | parameters
ip-address protocol spi-number ] | misc
secp-setting } [ secp [ slot/card/port ] ]
undo debugging ipsec { all | sa | packet [ policy
policy-name [ seq-number ] | parameters
ip-address protocol spi-number ] | misc |
secp-setting } [ secp [ slot/card/port ] ]
Action
7-67
Chapter 3 IPSec Configuration
Command
[ seq-number
Command
display ike sa [ secp [ slot/card/port ] ]
display ike peer [ name peer-name ]
[ secp [ slot/card/port ] ]
reset ike sa [ connection-id ] [ secp
[ slot/card/port ] ]
display ike proposal
[ slot/card/port ] ]
] ] [ secp
|
[ secp