3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

164 CHAPTER 10: IPSEC CONFIGURATION
Displaying and
Debugging IPsec
Displaying and
Debugging over IPsec
Module on Comware
Platform
Displaying and debugging IPsec configuration
After the above configuration, execute display command in any view to display
the running of the IPsec configuration, and to verify the effect of the
configuration.
Execute debugging command in user view for the debugging of IPsec
configuration.
Clearing IPsec packet statistical information
This command clears IPsec packet statistical information. All statistical information
is set to zero.
Perform the following configuration in the user view.
Deleting SA
The configuration is used to delete the established SA (either manually or through
IKE negotiation). If no parameter is specified, all the SAs will be deleted.
Perform the following configuration in user view.
Tabl e 157 Display and debug IPsec
Operation Command
Display Security Association related
information
display ipsec sa [ brief | remote ip-address |
policy policy-name [ seq-number ] | duration ]
Display the information about IPsec Tunnel display ipsec Tunnel
Display statistical information on IPsec
processed packet
display ipsec statistics
Display IPsec proposal display ipsec proposal [ proposal-name ]
Display IPsec policy
display ipsec policy [ brief | name policy-name [
seq-number ] ]
Display the configuration of DPD display ike dpd [ dpd-name ]
Delete Security Association
display ipsec policy-template [ brief | name
policy-name [ seq-number ] ]
Enable IPsec debugging function
debugging ipsec { all | sa | packet [ policy
policy-name [ seq-number ] | parameters
ip-address protocol spi-number ] | misc }
Disable IPsec debugging function
undo debugging ipsec { all | sa | packet [
policy policy-name [ seq-number ] | parameters
ip-address protocol spi-number ] | misc }
Enable the debugging for DPD debugging ike dpd
Disable the debugging for DPD undo debugging ike dpd
Tabl e 158 Clear IPsec packet statistics
Operation Command
Clear IPsec packet statistical information reset ipsec statistics