F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Command Reference-6PW100

96
Syntax
reset ipsec statistics
Views
User view
Default command level
1: Monitor level
Examples
# Clear IPsec packet statistics.
<Sysname> reset ipsec statistics
Related commands
display ipsec statistics
reverse-route
Use reverse-route to enable and configure the IPsec Reverse Route Inject (RRI) feature.
Use undo reverse-route to disable IPsec RRI.
Syntax
reverse-route [ remote-peer ip-address [ gateway | static ] | static ]
undo reverse-route
Default
IPsec RRI is disabled.
Views
IPsec policy view, IPsec policy template view
Default command level
2: System level
Parameters
static: Enables static IPsec Reverse Route Inject (RRI). Static IPsec RRI creates static routes based on the
ACL that the IPsec policy references. This keyword is available only in IPsec policy view. If this keyword
is not specified, you enable dynamic IPsec RRI, which creates static routes based on IPsec SAs.
remote-peer ip-address: Specifies a next hop for the static routes. To use the static routes for route backup
and load balancing, specify this option.
gateway: Creates two recursive routes: one to the remote tunnel endpoint and the other to the protected
remote private network. Use the gateway keyword in an IKE-enabled IPsec policy to define an explicit
default forwarding path for IPsec traffic.
Usage guidelines
IPsec RRI operates in static mode or dynamic mode:
• Static IPsec RRI creates one static route for each destination address permitted by the ACL that the
IPsec policy references. Static IPsec RRI creates static routes immediately after you configure IPsec
RRI for an IPsec policy and apply the IPsec policy. When you disable RRI, or remove the ACL or the