HP VPN Firewall Appliances VPN Command Reference

ike-peer name: peer1

perfect forward secrecy: DH group 2

transform-set name: prop1

synchronization inbound anti-replay-interval: 1000 packets

synchronization outbound anti-replay-interval: 10000 packets

IPsec sa local duration(time based): 3600 seconds

IPsec sa local duration(traffic based): 1843200 kilobytes

policy enable: True

===========================================

IPsec profile: "btoa"

Interface: Tunnel1

===========================================

-----------------------------

IPsec profile name: "btoa"

mode: tunnel

-----------------------------

security data flow :

ike-peer name: btoa

perfect forward secrecy:

transform-set name: method1

Synchronization inbound anti-replay-interval: 1000 packets

Synchronization outbound anti-replay-interval: 10000 packets

IPsec sa local duration(time based): 3600 seconds

IPsec sa local duration(traffic based): 1843200 kilobytes

policy enable: True

Table 15 Command output

Field Descri

tion

Interface Interface that references the IPsec profile.

mode

Encapsulation mode for the IPsec profile:

• dvpn—DVPN tunnel mode.

• tunnel—IPsec tunnel mode.

security data flow

ACL referenced by the IPsec profile.

Because an IPsec profile does not reference any ACL, this field is

blank.

ike-peer name IKE peer referenced by the IPsec profile.

perfect forward secrecy Whether PFS is enabled.

DH group

DH group used: 1, 2, 5, or 14.

If no DH group is used, this field is not displayed.

transport-set name IPsec transform set referenced by the IPsec profile.

synchronization inbound

anti-replay-interval

Inbound anti-replay window information synchronization

interval, expresses in the number of received packets.