TMS zl Management and Configuration Guide ST.1.1.100226

A-152
Command-Line Reference
IPsec Policy Context
To verify your location in the CLI, check the prompt. In the IPsec policy deny
context, the prompt is ProCurve(tms-module-<slot
ID>:ipsec:deny)#.
To exit the IPsec policy deny context, enter the following:
Syntax: exit
If you have not set all of the necessary configurations, you will be prompted
to do so and asked whether you actually want to exit.
The sections below document the commands available in the IPsec policy
deny context. You can:
■ Set the direction (page A-152)
■ Set the traffic selector (page A-153)
■ Preview the IPsec policy (page A-154)
■ Apply the IPsec policy (page A-152)
apply
Once you have configured all parts of the IPsec policy, you must apply the
policy. The apply command verifies that all required settings are configured
and then adds or edits the IPsec policy. (If the requirements are not met, the
command does not take effect, and an error message indicates which settings
are missing.) Enter the following command:
Syntax: apply
direction
To set the traffic direction to which the policy is applied, enter the following
command:
Syntax: direction <both | inbound | outbound>
The both option applies the deny action to traffic both to and from the local
and remote addresses and ports specified in the traffic selector. The inbound
option applies the deny action only to traffic from the remote addresses and
ports to the local addresses and ports. The outbound option applies the deny
action only to traffic from the local addresses and ports to the remote
addresses and ports.