D-Link NetDefend DFL-260E, Reference Manual

Page: 56 / 328

Show memory statistics about the IKE enigne.
ike -delete [<ip address>] [-srcif=<Interface>] [-force]
Delete IKE SAs.
ike -connect [<IPsecTunnel>]
Setup IKE and IPsec SAs for a specified tunnel.
ike -tunnels [<IPsecTunnel>] [-num={ALL | <Integer>}] [-force]
Show configured tunnels.
ike -show [<ip address>] [-num={ALL | <Integer>}]
[-srcif=<Interface>] [-verbose] [-force]
[-tunnel=<IPsecTunnel>]
Show current IKE SAs.
ike -snoop [<ip address>] [-match] [-brief] [-off]
Enable/disable IKE snooping.
ike -ha [-clear]
Shows statistics about IKE/IPsec SAs synchronized and how many that failed to import. Sent
statistics shows how many packets that has been sent to the other cluster member when this
node was active and receive statistics show how many packets/failures it got as inactive.
ike
Show current IKE SAs.
Options
-brief Show only header information.
-cfgmode Show statistics for config mode pool.
-clear Reset all statistics.
-connect Setup IKE and IPsec SAs for a specified tunnel.
-delete Delete IKE SAs.
-force Don't send notifications. Delete without delay.
-ha Show HA synchronizing statistics for IKE/IPsec SAs.
-match Turn on snooping of tunnel matching.
-mem Show memory statistics.
-num={ALL | <Integer>} Maximum number of entries to show (default:
40/8).
-off Turn off IKE snoop.
-show Show information on current IKE SAs.
-snoop Enable/disable snooping of IKE messages. (Admin
only)
Chapter 2: Command Reference
56