R3303-HP HSR6800 Routers Security Command Reference

343
Views
IKE peer view
Default command level
2: System level
Parameters
name: Specifies the name of the peer security gateway for IKE negotiation, a string of 1 to 32 characters.
Usage guidelines
If you configure the id-type name or id-type user-fqdn command on the initiator, the IKE negotiation
initiator sends its security gateway name as its ID for IKE negotiation, and the peer uses the security
gateway name configured with the remote-name command to authenticate the initiator. Make sure the
local gateway name matches the remote gateway name configured on the peer.
Related commands
• id-type
• local-name
• ike local-name
Examples
# Configure the remote security gateway name as apple for IKE peer peer1.
<Sysname> system-view
[Sysname] ike peer peer1
[Sysname-ike-peer-peer1] remote-name apple
reset ike sa
Use reset ike sa to clear IKE SAs.
Syntax
reset ike sa [ connection-id ]
Views
User view
Default command level
2: System level
Parameters
connection-id: Specifies the connection ID of the IKE SA to be cleared, in the range of 1 to
2000000000.
Usage guidelines
If you do not specify a connection ID, the command clears all ISAKMP SAs.
When you clear a local IPsec SA, its ISAKMP SA can transmit the Delete message to notify the remote
end to delete the paired IPsec SA. If the ISAKMP SA has been cleared, the local end cannot notify the
remote end to clear the paired IPsec SA, and you must manually clear the remote IPsec SA.
Examples
# Clear the IKE SA that uses connection ID 2.