Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)
The src-ip and dst-ip pair, upperspec and spi value are optional parameters. If the src-ip
and dst-ip pair are specified, all the SAs that match the src-ip and dst-ip are unloaded
from the SAD. If no option is specified, all the SAs currently loaded in the kernel are unloaded.
Unless you specify the -force option, you are prompted for confirmation.
EXAMPLES
> CLIMCMD clim1 climconfig sa -add
–manual –s 10.1.1.2 –d 10.3.3.2
–p esp –i 0x200 –m transport
–E 3des-cbc 0x123456789123456789123456789123456789123456789123
–A hmac-md5 0x12345678912345678912345678912345
> CLIMCMD clim1 climconfig sa -add -manual -s 10.1.1.2
-d 10.3.3.2 -p esp -i 0x200 -m transport
-E 3des-cbc 0x123456789123456789123456789123456789123456789123
-A hmac-md5 0x12345678912345678912345678912345 -load
> CLIMCMD clim1 climconfig sa -add –s 10.1.1.2
–d 10.3.3.2 –u any –E 3des –A hmac_md5
> CLIMCMD clim1 climconfig sa -add -s 10.1.1.2
-d 10.3.3.2 -u any -E 3des -A hmac_md5 –restart
> CLIMCMD clim1 climconfig sa -add -s 10.1.1.2
-d 10.3.3.2 -u any -E 3des -A hmac_md5 –restart -force
> CLIMCMD clim1 climconfig sa -delete –manual
–s 10.1.1.2 –d 10.3.3.2 –p esp -i 0x200 –unload
> CLIMCMD clim1 climconfig sa -delete -manual
-s 10.1.1.2 -d 10.3.3.2 -p esp -i 0x200
> CLIMCMD clim1 climconfig sa -delete -manual
-s 10.1.1.2 -d 10.3.3.2 -p esp -i 0x200 -unload -force
> CLIMCMD clim1 climconfig sa -delete –s 10.1.1.2
–d 10.3.3.2 –u any
> CLIMCMD clim1 climconfig sa -delete -s 10.1.1.2
-d 10.3.3.2 -u any -restart
> CLIMCMD clim1 climconfig sa -delete -s 10.1.1.2
-d 10.3.3.2 -u any –restart -force
> CLIMCMD clim1 climconfig sa -info
> CLIMCMD clim1 climconfig sa -stop –s 10.1.1.2
–d 10.3.3.2 –p esp –i 0x200
> CLIMCMD clim1 climconfig sa -stop –s 10.1.1.2
–d 10.3.3.2 –p esp –i 0x200 -force
> CLIMCMD clim1 climconfig sa -stop
> CLIMCMD clim1 climconfig sa –stop -force
> CLIMCMD clim1 climconfig sa -add –prov ztc0 -s 10.1.1.2
-d 10.3.3.2 -u any -E 3des -A hmac_md5
> CLIMCMD clim1 climconfig sa -add -manual –prov zsam1
-s 10.1.1.2
-d 10.3.3.2 -p esp -i 0x200 -m transport
-E 3des-cbc 0x123456789123456789123456789123456789123456789123
366










