vii
sa spi ···································································································································································· 344
sa string-key ························································································································································· 345
security acl ··························································································································································· 347
snmp-agent trap enable ipsec ···························································································································· 348
transform-set ························································································································································· 349
IKE commands ························································································································································· 351
authentication-algorithm ····································································································································· 351
authentication-method ········································································································································· 351
certificate domain ················································································································································ 352
dh ·········································································································································································· 353
display ike proposal ············································································································································ 354
display ike sa ······················································································································································· 355
dpd ········································································································································································ 358
encryption-algorithm············································································································································ 359
exchange-mode ··················································································································································· 360
ike dpd ································································································································································· 361
ike identity ···························································································································································· 362
ike invalid-spi-recovery enable ··························································································································· 363
ike keepalive interval ·········································································································································· 364
ike keepalive timeout ·········································································································································· 364
ike keychain ························································································································································· 365
ike limit ································································································································································· 366
ike nat-keepalive ·················································································································································· 367
ike profile ····························································································································································· 367
ike proposal ························································································································································· 368
ike signature-identity from-certificate ················································································································· 369
inside-vpn ····························································································································································· 370
keychain ······························································································································································· 371
local-identity ························································································································································· 371
match local address (IKE keychain view)·········································································································· 372
match local address (IKE profile view) ·············································································································· 373
match remote ······················································································································································· 374
pre-shared-key ······················································································································································ 376
priority (IKE keychain view) ································································································································ 377
priority (IKE profile view) ···································································································································· 378
proposal ······························································································································································· 378
reset ike sa ··························································································································································· 379
reset ike statistics ················································································································································· 380
sa duration ··························································································································································· 380
snmp-agent trap enable ike ································································································································ 381
SSH commands ······················································································································································· 383
SSH server commands ················································································································································· 383
display ssh server ················································································································································ 383
display ssh user-information ······························································································································· 384
sftp server enable ················································································································································ 385
sftp server idle-timeout ········································································································································· 386
ssh server acl ······················································································································································· 386
ssh server authentication-retries ························································································································· 387
ssh server authentication-timeout························································································································ 388
ssh server compatible-ssh1x enable ·················································································································· 389
ssh server dscp ····················································································································································· 389
ssh server enable ················································································································································· 390
ssh server ipv6 acl ··············································································································································· 391