vi
pki retrieve-certificate ·········································································································································· 284
pki retrieve-crl ······················································································································································ 285
pki storage ··························································································································································· 286
pki validate-certificate ········································································································································· 287
public-key dsa ······················································································································································ 289
public-key rsa ······················································································································································· 290
root-certificate fingerprint···································································································································· 291
rule ········································································································································································ 293
source ··································································································································································· 294
state ······································································································································································· 295
usage ···································································································································································· 295
IPsec commands ······················································································································································ 297
ah authentication-algorithm ································································································································ 297
description ···························································································································································· 298
display ipsec { ipv6-policy | policy } ················································································································ 298
display ipsec { ipv6-policy-template | policy-template } ················································································· 303
display ipsec profile ············································································································································ 304
display ipsec sa ··················································································································································· 306
display ipsec statistics ········································································································································· 309
display ipsec transform-set ································································································································· 311
display ipsec tunnel ············································································································································· 312
encapsulation-mode ············································································································································ 315
esp authentication-algorithm ······························································································································ 316
esp encryption-algorithm ···································································································································· 317
ike-profile ······························································································································································ 318
ipsec anti-replay check ······································································································································· 319
ipsec anti-replay window ··································································································································· 320
ipsec apply ··························································································································································· 320
ipsec decrypt-check enable ································································································································ 321
ipsec logging packet enable ······························································································································ 322
ipsec df-bit ···························································································································································· 322
ipsec global-df-bit ················································································································································ 323
ipsec { ipv6-policy | policy } ······························································································································ 324
ipsec { ipv6-policy | policy } isakmp template ································································································· 325
ipsec { ipv6-policy | policy } local-address ······································································································ 326
ipsec { ipv6-policy-template | policy-template } policy-template ···································································· 327
ipsec profile ························································································································································· 328
ipsec sa global-duration ····································································································································· 329
ipsec sa idle-time ················································································································································· 330
ipsec transform-set ··············································································································································· 331
local-address ························································································································································ 332
pfs ········································································································································································· 332
protocol ································································································································································ 333
qos pre-classify ···················································································································································· 334
remote-address ····················································································································································· 335
reset ipsec sa ······················································································································································· 336
reset ipsec statistics ············································································································································· 337
reverse-route dynamic ········································································································································· 338
reverse-route preference ····································································································································· 339
reverse-route tag ·················································································································································· 340
sa duration ··························································································································································· 340
sa hex-key authentication ··································································································································· 341
sa hex-key encryption ········································································································································· 342
sa idle-time ··························································································································································· 344