R3303-HP HSR6800 Routers Security Command Reference

vi
pki import-certificate ············································································································································ 259
pki request-certificate domain ···························································································································· 259
pki retrieval-certificate ········································································································································· 260
pki retrieval-crl domain ······································································································································· 261
pki validate-certificate ········································································································································· 261
root-certificate fingerprint···································································································································· 262
rule (PKI CERT ACP view) ··································································································································· 263
state ······································································································································································· 263
IPsec configuration commands ······························································································································· 265
ah authentication-algorithm ································································································································ 265
connection-name ·················································································································································· 266
cryptoengine enable ··········································································································································· 266
display ipsec policy ············································································································································ 267
display ipsec policy-template ····························································································································· 271
display ipsec profile ············································································································································ 273
display ipsec sa ··················································································································································· 275
display ipsec statistics ········································································································································· 280
display ipsec transform-set ································································································································· 282
display ipsec tunnel ············································································································································· 283
encapsulation-mode ············································································································································ 285
esp authentication-algorithm ······························································································································ 286
esp encryption-algorithm ···································································································································· 286
ike-peer (IPsec policy view/IPsec policy template view/IPsec profile view) ················································· 287
ipsec anti-replay check ······································································································································· 288
ipsec anti-replay window ··································································································································· 289
ipsec decrypt check ············································································································································· 289
ipsec fragmentation before-encryption ·············································································································· 290
ipsec invalid-spi-recovery enable ······················································································································· 290
ipsec policy (interface view) ······························································································································· 291
ipsec policy (system view) ·································································································································· 292
ipsec policy isakmp template ····························································································································· 293
ipsec policy-template ··········································································································································· 294
ipsec profile (system view) ·································································································································· 295
ipsec profile (tunnel interface view) ··················································································································· 295
ipsec sa global-duration ····································································································································· 296
ipsec transform-set ··············································································································································· 297
pfs ········································································································································································· 298
policy enable ······················································································································································· 299
qos pre-classify ···················································································································································· 299
reset ipsec sa ······················································································································································· 300
reset ipsec statistics ············································································································································· 301
reverse-route ························································································································································· 301
reverse-route preference ····································································································································· 305
reverse-route tag ·················································································································································· 306
sa authentication-hex ·········································································································································· 306
sa duration ··························································································································································· 308
sa encryption-hex ················································································································································ 309
sa spi ···································································································································································· 310
sa string-key ························································································································································· 311
security acl ··························································································································································· 312
transform······························································································································································· 314
transform-set ························································································································································· 314
tunnel local ··························································································································································· 315
tunnel remote ······················································································································································· 316