R0106-HP MSR Router Series Security Command Reference(V7)

vi
pki storage ··························································································································································· 284
pki validate-certificate ········································································································································· 285
public-key dsa ······················································································································································ 287
public-key rsa ······················································································································································· 288
root-certificate fingerprint···································································································································· 289
rule ········································································································································································ 291
source ··································································································································································· 292
state ······································································································································································· 293
usage ···································································································································································· 293
IPsec commands ······················································································································································ 295
ah authentication-algorithm ································································································································ 295
description ···························································································································································· 296
display ipsec { ipv6-policy | policy } ················································································································ 296
display ipsec { ipv6-policy-template | policy-template } ················································································· 301
display ipsec profile ············································································································································ 303
display ipsec sa ··················································································································································· 304
display ipsec statistics ········································································································································· 308
display ipsec transform-set ································································································································· 309
display ipsec tunnel ············································································································································· 311
encapsulation-mode ············································································································································ 313
esp authentication-algorithm ······························································································································ 314
esp encryption-algorithm ···································································································································· 315
ike-profile ······························································································································································ 316
ipsec anti-replay check ······································································································································· 317
ipsec anti-replay window ··································································································································· 318
ipsec apply ··························································································································································· 318
ipsec decrypt-check enable ································································································································ 319
ipsec logging packet enable ······························································································································ 320
ipsec df-bit ···························································································································································· 320
ipsec global-df-bit ················································································································································ 321
ipsec { ipv6-policy | policy } ······························································································································ 322
ipsec { ipv6-policy | policy } isakmp template ································································································· 323
ipsec { ipv6-policy | policy } local-address ······································································································ 324
ipsec { ipv6-policy-template | policy-template } policy-template ···································································· 325
ipsec profile ························································································································································· 326
ipsec sa global-duration ····································································································································· 327
ipsec sa idle-time ················································································································································· 328
ipsec transform-set ··············································································································································· 329
local-address ························································································································································ 329
pfs ········································································································································································· 330
protocol ································································································································································ 331
qos pre-classify ···················································································································································· 332
remote-address ····················································································································································· 332
reset ipsec sa ······················································································································································· 334
reset ipsec statistics ············································································································································· 335
reverse-route dynamic ········································································································································· 336
reverse-route preference ····································································································································· 337
reverse-route tag ·················································································································································· 337
sa duration ··························································································································································· 338
sa hex-key authentication ··································································································································· 339
sa hex-key encryption ········································································································································· 340
sa idle-time ··························································································································································· 341
sa spi ···································································································································································· 342
sa string-key ························································································································································· 343