281
Task Remarks
Applying an IPsec policy to an IPv6 routing
protocol
Required
See
Layer 3
—
IP Routing Configuration Guide
.
Displaying and maintaining IPsec
To do…
Use the command…
Remarks
Display IPsec policy information
display
ipsec
policy
[
brief
|
name
policy-name
[
seq-number
] ] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
Display IPsec proposal
information
display
ipsec
proposal
[
proposal-name
]
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
Display IPsec SA information
display
ipsec
sa
[
brief
|
policy
policy-name
[
seq-number
] |
remote
ip-address
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
Display IPsec session information
display ipsec session
[
tunnel-id
integer
]
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
This command is supported
only in FIPS mode.
Display IPsec packet statistics
display
ipsec
statistics
[
tunnel-id
integer
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
Display IPsec tunnel information
display
ipsec
tunnel
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view.
Clear SAs
reset
ipsec
sa
[
parameters
dest-address
protocol
spi
|
policy
policy-name
[
seq-number
] |
remote
ip-address
]
Available in user view.
Clear IPsec sessions
reset ipsec session
[
tunnel-id
integer
]
Available in user view.
This command is supported
only in FIPS mode.
Clear IPsec statistics
reset
ipsec
statistics
Available in user view.
IPsec configuration examples
IKE-based IPsec tunnel for IPv4 packets configuration example
Network requirements
As shown in
, configure an IPsec tunnel between Switch A and Switch B to protect data flows
between Switch A and Switch B. Configure the tunnel to use the security protocol ESP, the encryption
algorithm AES-CBC-128, and the authentication algorithm HMAC-SHA1-96.
