R211x-HP Flexfabric 11900 Security Command Reference

iv
public-key local create ········································································································································ 164
public-key local destroy ······································································································································ 168
public-key local export dsa ································································································································ 169
public-key local export rsa ································································································································· 171
public-key peer ···················································································································································· 173
public-key peer import sshkey ···························································································································· 174
IPsec commands ······················································································································································ 176
ah authentication-algorithm ································································································································ 176
description ···························································································································································· 177
display ipsec { ipv6-policy | policy } ················································································································ 177
display ipsec sa ··················································································································································· 181
display ipsec statistics ········································································································································· 184
display ipsec transform-set ································································································································· 185
display ipsec tunnel ············································································································································· 187
encapsulation-mode ············································································································································ 189
esp authentication-algorithm ······························································································································ 190
esp encryption-algorithm ···································································································································· 191
ike-profile ······························································································································································ 192
ipsec anti-replay check ······································································································································· 193
ipsec anti-replay window ··································································································································· 194
ipsec apply ··························································································································································· 195
ipsec decrypt-check enable ································································································································ 195
ipsec logging packet enable ······························································································································ 196
ipsec df-bit ···························································································································································· 197
ipsec global-df-bit ················································································································································ 198
ipsec { ipv6-policy | policy } ······························································································································ 198
ipsec { ipv6-policy | policy } local-address ······································································································ 200
ipsec sa global-duration ····································································································································· 201
ipsec sa idle-time ················································································································································· 202
ipsec transform-set ··············································································································································· 202
local-address ························································································································································ 203
pfs ········································································································································································· 204
protocol ································································································································································ 205
qos pre-classify ···················································································································································· 206
remote-address ····················································································································································· 206
reset ipsec sa ······················································································································································· 208
reset ipsec statistics ············································································································································· 209
sa duration ··························································································································································· 209
sa hex-key authentication ··································································································································· 210
sa hex-key encryption ········································································································································· 211
sa idle-time ··························································································································································· 213
sa spi ···································································································································································· 213
sa string-key ························································································································································· 214
security acl ··························································································································································· 216
snmp-agent trap enable ipsec ···························································································································· 217
transform-set ························································································································································· 218
IKE commands ························································································································································· 220
authentication-algorithm ····································································································································· 220
authentication-method ········································································································································· 221
dh ·········································································································································································· 221
display ike proposal ············································································································································ 222
display ike sa ······················································································································································· 223
dpd ········································································································································································ 226