R0106-HP MSR Router Series Security Command Reference(V7)
vii
security acl ··························································································································································· 344
snmp-agent trap enable ipsec ···························································································································· 346
transform-set ························································································································································· 347
IKE commands ························································································································································· 349
authentication-algorithm ····································································································································· 349
authentication-method ········································································································································· 350
certificate domain ················································································································································ 350
dh ·········································································································································································· 351
display ike proposal ············································································································································ 352
display ike sa ······················································································································································· 353
dpd ········································································································································································ 356
encryption-algorithm············································································································································ 357
exchange-mode ··················································································································································· 358
ike dpd ································································································································································· 359
ike identity ···························································································································································· 360
ike invalid-spi-recovery enable ··························································································································· 361
ike keepalive interval ·········································································································································· 362
ike keepalive timeout ·········································································································································· 363
ike keychain ························································································································································· 363
ike limit ································································································································································· 364
ike nat-keepalive ·················································································································································· 365
ike profile ····························································································································································· 366
ike proposal ························································································································································· 366
ike signature-identity from-certificate ················································································································· 367
inside-vpn ····························································································································································· 368
keychain ······························································································································································· 369
local-identity ························································································································································· 369
match local address (IKE keychain view)·········································································································· 370
match local address (IKE profile view) ·············································································································· 371
match remote ······················································································································································· 372
pre-shared-key ······················································································································································ 374
priority (IKE keychain view) ································································································································ 375
priority (IKE profile view) ···································································································································· 376
proposal ······························································································································································· 376
reset ike sa ··························································································································································· 377
reset ike statistics ················································································································································· 378
sa duration ··························································································································································· 378
snmp-agent trap enable ike ································································································································ 379
SSH commands ······················································································································································· 381
SSH server commands ················································································································································· 381
display ssh server ················································································································································ 381
display ssh user-information ······························································································································· 382
sftp server enable ················································································································································ 383
sftp server idle-timeout ········································································································································· 384
ssh server acl ······················································································································································· 385
ssh server authentication-retries ························································································································· 385
ssh server authentication-timeout························································································································ 386
ssh server compatible-ssh1x enable ·················································································································· 387
ssh server dscp ····················································································································································· 388
ssh server enable ················································································································································· 388
ssh server ipv6 acl ··············································································································································· 389
ssh server ipv6 dscp ············································································································································ 390
ssh server rekey-interval ······································································································································ 390