Huawei USG6000 Upgrade Manual page 17

HUAWEI USG6000&USG9500
Upgrade Guide
The command
display ike sa verbose
{ remote { ipv4-address |
ipv6-address } | connection-
id connection-id | [ remote-
id-type remote-id-type ]
remote-id remote-id }
display ike sa [ slot slot-id
cpu cpu-id ] { all-systems |
vsys vsys-name } [ active |
standby ]
[ undo ] flow-vrf check
disable
[ undo ] local-id-preference
certificate enable
[ undo ] local-id-reflect
enable
display mac-access-profile
configuration [ name
access-profile-name ]
[ undo ] mac-access-profile
name access-profile-name
[ undo ] mac-authen
reauthenticate
[ undo ] mac-authen timer
reauthenticate-period
reauthenticate-period-value
Issue 01 (2018-01-16)
Description
The command displays
information about SAs
established through IKE
negotiation.
The command displays
information about SAs
established through IKE
negotiation.
The command disables/
enables the check of the
VPN instance in a data flow
during IPSec encryption/
decryption.
The command enables/
disables the device to
preferentially obtain the
local ID from a field in a
certificate when IKE uses
certificate negotiation.
The command enables/
disables the function of
using the local ID of the
responder as the remote ID
carried in the IKE packets
sent by the initiator during
IKEv2 negotiation.
The command displays the
configuration of a MAC
access profile.
The command creates a
MAC access profile and
displays the MAC access
profile view.
The command enables re-
authentication for online
MAC address authentication
users.
The command configures
the re-authentication
interval for online MAC
address authentication users.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 USG6000
Impact
None
None
None
None
None
None
None
None
None
8