Huawei USG6000 - Page 17

The command Description Impact
display ike sa verbose
{ remote { ipv4-address |
ipv6-address } | connection-
id connection-id | [ remote-
id-type remote-id-type ]
remote-id remote-id }
The command displays
information about SAs
established through IKE
negotiation.
None
display ike sa [ slot slot-id
cpu cpu-id ] { all-systems |
vsys vsys-name } [ active |
standby ]
The command displays
information about SAs
established through IKE
negotiation.
None
[ undo ] flow-vrf check
disable
The command disables/
enables the check of the
VPN instance in a data flow
during IPSec encryption/
decryption.
None
[ undo ] local-id-preference
certificate enable
The command enables/
disables the device to
preferentially obtain the
local ID from a field in a
certificate when IKE uses
certificate negotiation.
None
[ undo ] local-id-reflect
enable
The command enables/
disables the function of
using the local ID of the
responder as the remote ID
carried in the IKE packets
sent by the initiator during
IKEv2 negotiation.
None
display mac-access-profile
configuration [ name
access-profile-name ]
The command displays the
configuration of a MAC
access profile.
None
[ undo ] mac-access-profile
name access-profile-name
The command creates a
MAC access profile and
displays the MAC access
profile view.
None
[ undo ] mac-authen
reauthenticate
The command enables re-
authentication for online
MAC address authentication
users.
None
[ undo ] mac-authen timer
reauthenticate-period
reauthenticate-period-value
The command configures
the re-authentication
interval for online MAC
address authentication users.
None
HUAWEI USG6000&USG9500
Upgrade Guide
1 USG6000
Issue 01 (2018-01-16) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8