R2511-HP MSR Router Series Security Command Reference(V5)

v
ipsec profile (system view) ·································································································································· 213
ipsec profile (tunnel interface view) ··················································································································· 214
ipsec sa global-duration ····································································································································· 214
ipsec session idle-time ········································································································································· 215
ipsec transform-set ··············································································································································· 216
local-address ························································································································································ 216
pfs ········································································································································································· 217
policy enable ······················································································································································· 218
qos pre-classify ···················································································································································· 219
remote-address ····················································································································································· 219
reset ipsec sa ······················································································································································· 220
reset ipsec session ··············································································································································· 221
reset ipsec statistics ············································································································································· 222
reverse-route ························································································································································· 222
reverse-route preference ····································································································································· 226
reverse-route tag ·················································································································································· 226
sa authentication-hex ·········································································································································· 227
sa duration ··························································································································································· 228
sa encryption-hex ················································································································································ 229
sa spi ···································································································································································· 230
sa string-key ························································································································································· 232
security acl ··························································································································································· 233
tfc enable (IPsec policy view/ IPsec policy template view/IPsec profile view) ············································· 234
transform······························································································································································· 235
transform-set ························································································································································· 236
tunnel local ··························································································································································· 237
tunnel remote ······················································································································································· 237
IKE configuration commands ·································································································································· 239
authentication-algorithm ····································································································································· 239
authentication-method ········································································································································· 240
certificate domain ················································································································································ 240
dh ·········································································································································································· 241
display ike dpd ···················································································································································· 242
display ike peer ··················································································································································· 243
display ike proposal ············································································································································ 244
display ike sa ······················································································································································· 245
dpd ········································································································································································ 249
encryption-algorithm············································································································································ 249
exchange-mode ··················································································································································· 250
id-type ··································································································································································· 251
ike dpd ································································································································································· 252
ike local-name ······················································································································································ 253
ike next-payload check disabled ······················································································································· 254
ike peer (system view) ········································································································································· 254
ike proposal ························································································································································· 255
ike sa keepalive-timer interval ···························································································································· 255
ike sa keepalive-timer timeout ···························································································································· 256
ike sa nat-keepalive-timer interval ······················································································································ 257
interval-time ·························································································································································· 257
local ······································································································································································ 258
local-address ························································································································································ 258
local-name ···························································································································································· 259
nat traversal ························································································································································· 260
peer ······································································································································································· 260