H3C MSR Series Command Reference

660
Field
Description
Re-register in
Period of time after which the GM re-registers with a KS.
N/A
indicates that the GM does not re-register with a KS.
Succeeded registrations Number of successful registrations.
Attempted registrations Number of registration attempts.
Last rekey from
KS from which the GM receives the last rekey message.
N/A
indicates that the GM does not receive any rekey messages.
Last rekey seq num
Sequence number of the last received rekey message.
N/A
indicates that the GM does not receive any rekey messages.
Multicast rekeys received
Number of multicast rekeys received. This field is displayed only
when the GDOI GM group is a multicast group.
Unicast rekeys received
Number of unicast rekeys received. This field is displayed only
when the GDOI GM group is a unicast group.
Rekey ACKs sent
Number of rekey ACK messages sent. This field is displayed only
when the GDOI GM group is a unicast group.
Allowable rekey cipher
Rekey encryption algorithms that the GM allows.
Any
indicates
that the GM allows all encryption algorithms.
Allowable rekey hash
Rekey hash algorithms that the GM allows.
Any
indicates that the
GM allows all hash algorithms.
Allowable transform
Rekey transform modes that the GM allows.
Any
indicates that
the GM allows all transform modes.
Rekeys cumulative Rekey statistics.
Total received Total number of rekeys that the GM has received.
Rekeys after latest registration
Number of rekeys that the GM has received after the last
successful registration.
Last rekey received for
Period of time for which the key has existed after the last rekey
operation.
N/A
indicates that no rekey message is received. This
field is displayed only in multicast mode.
Total rekey ACKs sent
Number of rekey ACK messages sent. This field is displayed only
in unicast mode.
ACL downloaded from KS 90.1.1.1 ACL information downloaded from the KS at 90.1.1.1.
rule 0 deny udp source-port eq 848
destination-port eq 848
UDP packets whose source and destination port numbers are
both 848 do not need to be protected by IPsec.
rule 1 deny ospf OSPF protocol packets do not need to be protected by IPsec.
rule 2 permit icmp All ICMP packets need to be protected by IPsec.
KEK KEK information.
Rekey transport type Transport type of rekey messages:
Multicast
or
Unicast
.
Remaining key lifetime KEK lifetime in seconds.
Encrypt algorithm KEK encryption algorithm.
Key size KEK key length.
Signature algorithm KEK signature algorithm.
Signature hash algorithm KEK signature hash algorithm.
Signature key length KEK signature key length in bits.

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS