R2511-HP MSR Router Series Security Command Reference(V5)

304
You can specify up to six IKEv2 proposals for an IKEv2 policy. A proposal specified earlier has a higher
priority.
With no argument specified, the undo proposal command removes all IKEv2 proposal references.
Examples
# Specify IKEv2 proposals proposal1 and proposal2 for IKEv2 policy policy1, with proposal1 preferred.
<Sysname> system-view
[Sysname] ikev2 policy policy1
[Sysname-ikev2-policy-policy1] proposal proposal1 proposal2
Related commands
display ikev2 policy
reset ikev2 sa
Use reset ikev2 sa to delete IKE SAs and the IPsec SAs negotiated by them.
Syntax
reset ikev2 sa [ { local-address | remote-address } { ipv4-address | ipv6 ipv6-address } ]
Views
User view
Default command level
2: System level
Parameters
remote-address: Deletes the IKEv2 SAs that uses a specified remote address.
local-address: Deletes the IKEv2 SAs that uses a specified local address.
ipv4-address: Specifies the local or remote IPv4 address.
ipv6 ipv6-address: Specifies the local or remote IPv6 address.
Usage guidelines
With no parameter specified, the command deletes all IKEv2 SAs and the IPsec SAs negotiated by them.
Examples
# Delete the IKEv2 SAs with the local address 1.1.1.1 and the IPsec SAs negotiated by them.
<Sysname> reset ikev2 sa local-address 1.1.1.1
# Delete the IKEv2 SAs with the remote address 1.1.1.1 and the IPsec SAs negotiated by them.
<Sysname> reset ikev2 sa remote-address 1.1.1.1
# Delete all IKEv2 SAs and the IPsec SAs negotiated by them.
<Sysname> reset ikev2 sa
Related commands
display ikev2 sa
reset ikev2 statistics
Use reset ikev2 statistics to reset IKEv2 negotiation statistics.