R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

60
Default level
2: System level
Parameters
None
Description
Use the qos pre-classify command to enable packet information pre-extraction.
Use the undo qos pre-classify command to restore the default.
By default, packet information pre-extraction is disabled.
With the packet information pre-extraction feature enabled, QoS classifies a packet based on the header
of the original IP packet, that is, the header of the IP packet that has not been encapsulated by IPsec.
Related commands: ipsec policy (system view) and ipsec policy-template.
Examples
# Enable packet information pre-extraction.
<Sysname> system-view
[Sysname] ipsec policy policy1 100 manual
[Sysname-ipsec-policy-manual-policy1-100] qos pre-classify
reset ipsec sa
Syntax
reset ipsec sa [ parameters dest-address protocol spi | policy policy-name [ seq-number ] | remote
ip-address ]
View
User view
Default level
2: System level
Parameters
parameters dest-address protocol spi: Specifies IPsec SAs that use the specified destination address,
security protocol, and SPI .
dest-address: Destination address, in dotted decimal notation.
protocol: Security protocol, which can be keyword ah or esp, case insensitive.
spi: Security parameter index, in the range 256 to 4294967295.
policy: Specifies IPsec SAs that use an IPsec policy or IPsec profile.
policy-name: Name of the IPsec policy or IPsec profile, a case-sensitive string of 1 to 15 alphanumeric
characters.
seq-number: Sequence number of the IPsec policy, in the range 1 to 10000. If no seq-number is specified,
all the policies in the IPsec policy group named policy-name are specified.
remote ip-address: Specifies SAs to or from a remote address, in dotted decimal notation.