R3102-R3103-HP 6600/HSR6600 Routers Security Command Reference

275
<Sysname> display ipsec policy brief
IPsec Policy Name Mode ACL IKE Peer Name Mapped Template
------------------------------------------------------------------------
bbbbbbbbbbbbbbb-1 template aaaaaaaaaaaaaaa
man-1 manual 3400
map-1 isakmp 3000 peer
nat-1 isakmp 3500 nat
test-1 isakmp 3200 test
toccccc-1 isakmp 3003 tocccc
IPsec Policy Name Mode ACL Local Address Remote Address
------------------------------------------------------------------------
man-1 manual 3400 3.3.3.1 3.3.3.2
Table 35 Command output
Field Descri
p
tion
IPsec Policy Name Name and sequence number of the IPsec policy separated by hyphen.
Mode
Negotiation mode of the IPsec policy:
• manual—Manual mode.
• isakmp—IKE negotiation mode.
• template—IPsec policy template mode.
• gdoi—GDOI mode.
ACL ACL referenced by the IPsec policy.
Mapped Template Referenced IPsec policy template.
Local Address IP address of the local end.
Remote Address IP address of the remote end.
# Display detailed information about all IPsec policies.
<Sysname> display ipsec policy
===========================================
IPsec Policy Group: "policy_isakmp"
Interface: GigabitEthernet3/0/1
===========================================
------------------------------------
IPsec policy name: "policy_isakmp"
sequence number: 10
acl version: ACL4
mode: isakmp
-------------------------------------
encapsulation mode: tunnel
security data flow : 3000
selector mode: standard
ike-peer name: per
PFS: N
transform-set name: prop1