Brocade Communications Systems NetIron MLXe Series, Hardware Installation Manual

Page: 53 / 305

IKEv2 Option Description
NOTE
Range of interval: 10 - 1440
Proposal <proposal-name> The IPsec proposal to be used with this IPsec profile. Multiple proposals can be specified.
Replay-protection (Optional) Disable anti-replay checking for a particular IPsec Profile. By default it is disabled.
NOTE
The setting of this command must match the setting of ESN-enable under the IPsec proposal.
IKEv2 Show Commands
IKEv2 show commands include configured proposals, policy, profile, security associations, sessions, certificates, counters, security
associations, statistics, proposals, and database for security policies.
IKEv2 Option Description
Show ikev2 proposal [name] Show configured IKEv2 proposals.
Show ikev2 policy [policy-name] Show IKEv2 policy.
Show ikev2 profile [profile-name] Show IKEv2 profile.
Show ikev2 sa [spi-index | fvrf
<vrf-name> | local <address> |
remote <address> ] [detail]
Show IKEv2 security associations.
Show ikev2 {session [local-spi-
id]} [detail]
Show IKEv2 sessions.
Show ikev2 certificate Show certificates used by IKEv2.
Show ikev2 statistics Show ikev2 counters.
Show ipsec profile [profile-name] Show configured IPSEC profiles.
Show ipsec proposal [proposal-
name]
Show configured IPSEC proposals.
Show ipsec sa [address
<address> | identity <id> | interface
<name> | peer address] [detail]
Show IPSEC security associations.
show ipsec statistics [tunnel
<tunnel-id> ]
Show Ipsec SA statistics.
Show ipsec Policy Displays the database for the IPsec security policies.
Examples of Show Commands
show ikev2 proposal:
device# show ikev2 proposal
Name : ikev2-default-proposal
Encryption : AES-CBC-256
Integrity : sha384
PRF : sha384
DH Group : 384_ECP/Group 20
show ikev2 policy:
device# show ikev2 policy
Name : ike_policy_red
vrf : Default
Router modules
Brocade NetIron MLXe Series Hardware Installation Guide
53-1004203-04 53