R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101
ii
exchange-mode ····················································································································································· 44
id-type ····································································································································································· 45
ike dpd ··································································································································································· 46
ike local-name ························································································································································ 47
ike next-payload check disabled ························································································································· 47
ike peer··································································································································································· 48
ike proposal ··························································································································································· 48
ike sa keepalive-timer interval ······························································································································ 49
ike sa keepalive-timer timeout ······························································································································ 50
ike sa nat-keepalive-timer interval ························································································································ 50
interval-time ···························································································································································· 51
local ········································································································································································ 51
local-address ·························································································································································· 52
local-name ······························································································································································ 53
nat traversal ··························································································································································· 53
peer ········································································································································································· 54
pre-shared-key ························································································································································ 55
proposal ································································································································································· 55
remote-address ······················································································································································· 56
remote-name ·························································································································································· 57
reset ike sa ····························································································································································· 58
sa duration ····························································································································································· 59
time-out ··································································································································································· 60
IPsec configuration commands ·································································································································· 61
ah authentication-algorithm ·································································································································· 61
connection-name ···················································································································································· 62
cryptoengine enable ············································································································································· 62
display ipsec policy ·············································································································································· 63
display ipsec policy-template ······························································································································· 67
display ipsec profile ·············································································································································· 68
display ipsec proposal ·········································································································································· 70
display ipsec sa ····················································································································································· 71
display ipsec statistics ··········································································································································· 75
display ipsec tunnel ··············································································································································· 76
encapsulation-mode ·············································································································································· 78
esp authentication-algorithm ································································································································ 79
esp encryption-algorithm ······································································································································ 80
ike-peer (IPsec policy view, IPsec policy template view, IPsec profile view) ··················································· 81
ipsec anti-replay check ········································································································································· 81
ipsec anti-replay window ····································································································································· 82
ipsec decrypt check ··············································································································································· 82
ipsec invalid-spi-recovery enable ························································································································· 83
ipsec policy (interface view) ································································································································· 83
ipsec policy (system view) ···································································································································· 84
ipsec policy isakmp template ······························································································································· 85
ipsec policy-template ············································································································································· 86
ipsec profile (system view) ···································································································································· 86
ipsec profile (tunnel interface view) ····················································································································· 87
ipsec proposal ······················································································································································· 88
ipsec sa global-duration ······································································································································· 88
ipsec synchronization enable······························································································································· 89
pfs ··········································································································································································· 90
policy enable ························································································································································· 90
proposal (IPsec policy view/IPsec policy template view/IPsec profile view) ·················································· 91