HP VPN Firewall Appliances VPN Command Reference
ii
local-address ·························································································································································· 45
local-name ······························································································································································ 46
nat traversal ··························································································································································· 46
peer ········································································································································································· 47
pre-shared-key ························································································································································ 48
proposal ································································································································································· 48
remote-address ······················································································································································· 49
remote-name ·························································································································································· 50
reset ike sa ····························································································································································· 51
sa duration ····························································································································································· 52
time-out ··································································································································································· 53
IPsec commands ························································································································································· 55
ah authentication-algorithm ·································································································································· 55
connection-name ···················································································································································· 56
cryptoengine enable ············································································································································· 56
display ipsec policy ·············································································································································· 57
display ipsec policy-template ······························································································································· 61
display ipsec profile ·············································································································································· 63
display ipsec sa ····················································································································································· 65
display ipsec statistics ··········································································································································· 69
display ipsec transform-set ··································································································································· 70
display ipsec tunnel ··············································································································································· 72
encapsulation-mode ·············································································································································· 73
esp authentication-algorithm ································································································································ 74
esp encryption-algorithm ······································································································································ 75
ike-peer (IPsec policy view/IPsec policy template view/IPsec profile view) ··················································· 76
ipsec anti-replay check ········································································································································· 77
ipsec anti-replay window ····································································································································· 77
ipsec decrypt check ··············································································································································· 78
ipsec invalid-spi-recovery enable ························································································································· 78
ipsec policy (interface view) ································································································································· 79
ipsec policy (system view) ···································································································································· 79
ipsec policy isakmp template ······························································································································· 81
ipsec policy-template ············································································································································· 81
ipsec profile (system view) ···································································································································· 82
ipsec profile (tunnel interface view) ····················································································································· 83
ipsec sa global-duration ······································································································································· 84
ipsec synchronization enable······························································································································· 85
ipsec transform-set ················································································································································· 85
pfs ··········································································································································································· 86
policy enable ························································································································································· 87
qos pre-classify ······················································································································································ 88
reset ipsec sa ························································································································································· 88
reset ipsec statistics ··············································································································································· 90
reverse-route ··························································································································································· 90
reverse-route preference ······································································································································· 93
reverse-route tag ···················································································································································· 94
sa authentication-hex ············································································································································ 95
sa duration ····························································································································································· 96
sa encryption-hex ·················································································································································· 97
sa spi ······································································································································································ 98
sa string-key ··························································································································································· 99
security acl ··························································································································································· 101
synchronization anti-replay-interval (IPsec policy view/IPsec policy template view/IPsec profile view) ··· 102