pfs ········································································································································································· 350
protocol ································································································································································ 351
qos pre-classify ···················································································································································· 352
remote-address ····················································································································································· 353
reset ipsec sa ······················································································································································· 354
reset ipsec statistics ············································································································································· 356
sa duration ··························································································································································· 356
sa hex-key authentication ··································································································································· 357
sa hex-key encryption ········································································································································· 358
sa idle-time ··························································································································································· 360
sa spi ···································································································································································· 360
sa string-key ························································································································································· 361
security acl ··························································································································································· 363
transform-set ························································································································································· 364
IKE commands ························································································································································· 366
authentication-algorithm ····································································································································· 366
authentication-method ········································································································································· 367
certificate domain ················································································································································ 368
dh ·········································································································································································· 369
display ike proposal ············································································································································ 370
display ike sa ······················································································································································· 371
dpd ········································································································································································ 374
encryption-algorithm············································································································································ 375
exchange-mode ··················································································································································· 376
ike dpd ································································································································································· 377
ike identity ···························································································································································· 378
ike invalid-spi-recovery enable ··························································································································· 379
ike keepalive interval ·········································································································································· 380
ike keepalive timeout ·········································································································································· 381
ike keychain ························································································································································· 381
ike limit ································································································································································· 382
ike nat-keepalive ·················································································································································· 383
ike profile ····························································································································································· 384
ike proposal ························································································································································· 384
ike signature-identity from-certificate ················································································································· 386
inside-vpn ····························································································································································· 386
keychain ······························································································································································· 387
local-identity ························································································································································· 388
match local address (IKE keychain view)·········································································································· 389
match local address (IKE profile view) ·············································································································· 390
match remote ······················································································································································· 391
pre-shared-key ······················································································································································ 393
priority (IKE keychain view) ································································································································ 394
ix