Black Box ET0010A, Руководство пользователя CLI

Страница: 92 / 212

Securing Management Port Traffic with IPsec
ETEP CLI User Guide 93
Deleting a Policy
To delete a management port policy, first issue the policy-delete command using the policy name that
you want to remove, and then deploy the policy set. The targeted policy continues to run on the ETEP
until the policy set is deployed.
You may want to create a backup copy of the active policies prior to making any changes to the policy
set.
To delete a policy:
1 From the
ipsec-config>
prompt, enter the policy-delete command for the policy that you wish to
delete.
policy-delete <name>
2 Deploy the policy set for the changes to take effect on the ETEP.
deploy-policy-set
Related topics:
●
“Restoring the Policy Set” on page 94
●
“policy-delete” on page 168
Clearing the Policy Set
The clear-policy-set command clears the specified management port policy files, returning them to the
factory state.
Clearing the current policies removes all the active policies that are running on the ETEP, pending
policies, and the backup copy of the policy set. Clearing the management port policies removes the
policies and then deploys the factory default IKE policy.
The edit option removes the pending policies and pending IKE parameter changes. The backup option
removes the backup policy set. These options do not affect the active, deployed policies.
To clear the policy set:
1 From the
ipsec-config>
prompt, enter the clear
-policy-set
command (see Table 50 ).
clear-policy-set {edit | backup | current}
2 At the confirmation prompt, type yes to continue, or press any key to cancel.
Related Topics:
●
“clear-policies” on page 133
Table 50 clear-policy-set description
Attribute Description
edit Clears the edit session. Pending policy changes and pending IKE
parameters changes are removed.
backup Clears the backup copy of the policy set.
current Clears the active policies that are running on the ETEP, pending policies,
and the backup policy set. This is the default setting.