335
By default, the size of the anti-replay window is 32.
Your configuration affects only IPsec SAs negotiated later.
Examples
# Set the size of the anti-replay window to 64.
<Sysname> system-view
[Sysname] ipsec anti-replay window 64
ipsec decrypt check
Syntax
ipsec decrypt check
undo ipsec decrypt check
View
System view
Default level
2: System level
Parameters
None
Description
Use the ipsec decrypt check command to enable ACL checking of de-encapsulated IPsec packets.
Use the undo ipsec decrypt check command to disable ACL checking of de-encapsulated IPsec packets.
By default, ACL checking of de-encapsulated IPsec packets is enabled.
Examples
# Enable ACL checking of de-encapsulated IPsec packets.
<Sysname> system-view
[Sysname] ipsec decrypt check
ipsec policy (interface view)
Syntax
ipsec policy policy-name
undo ipsec policy [ policy-name ]
View
Interface view
Default level
2: System level
Parameters
policy-name: Name of the existing IPsec policy group to be applied to the interface, a string of 1 to 15
characters.
To Next Page
Loading...
Need help?
General