F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Command Reference-6PW100

ii
local-address ·························································································································································· 50
local-name ······························································································································································ 51
nat traversal ··························································································································································· 52
peer ········································································································································································· 52
pre-shared-key ························································································································································ 53
proposal ································································································································································· 53
remote-address ······················································································································································· 54
remote-name ·························································································································································· 55
reset ike sa ····························································································································································· 56
sa duration ····························································································································································· 58
time-out ··································································································································································· 58
IPsec configuration commands ·································································································································· 60
ah authentication-algorithm ·································································································································· 60
connection-name ···················································································································································· 61
cryptoengine enable ············································································································································· 61
display ipsec policy ·············································································································································· 62
display ipsec policy-template ······························································································································· 66
display ipsec profile ·············································································································································· 68
display ipsec sa ····················································································································································· 70
display ipsec statistics ··········································································································································· 74
display ipsec transform-set ··································································································································· 76
display ipsec tunnel ··············································································································································· 77
encapsulation-mode ·············································································································································· 79
esp authentication-algorithm ································································································································ 80
esp encryption-algorithm ······································································································································ 80
ike-peer (IPsec policy view/IPsec policy template view/IPsec profile view) ··················································· 81
ipsec anti-replay check ········································································································································· 82
ipsec anti-replay window ····································································································································· 83
ipsec decrypt check ··············································································································································· 83
ipsec invalid-spi-recovery enable ························································································································· 84
ipsec policy (interface view) ································································································································· 84
ipsec policy (system view) ···································································································································· 85
ipsec policy isakmp template ······························································································································· 86
ipsec policy-template ············································································································································· 87
ipsec profile (system view) ···································································································································· 88
ipsec profile (tunnel interface view) ····················································································································· 88
ipsec sa global-duration ······································································································································· 89
ipsec synchronization enable······························································································································· 90
ipsec transform-set ················································································································································· 91
pfs ··········································································································································································· 92
policy enable ························································································································································· 93
qos pre-classify ······················································································································································ 93
reset ipsec sa ························································································································································· 94
reset ipsec statistics ··············································································································································· 95
reverse-route ··························································································································································· 96
reverse-route preference ······································································································································· 99
reverse-route tag ·················································································································································· 100
sa authentication-hex ·········································································································································· 100
sa duration ··························································································································································· 102
sa encryption-hex ················································································································································ 103
sa spi ···································································································································································· 104
sa string-key ························································································································································· 105
security acl ··························································································································································· 106
synchronization anti-replay-interval (IPsec policy view/IPsec policy template view/IPsec profile view) ··· 108