H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 373)

359
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable IPsec stateful
failover.
ipsec synchronization enable
Optional.
By default, IPsec stateful
failover is enabled.
Displaying and maintaining IPsec
Task Command Remarks
Display IPsec policy information.
display ipsec policy [ brief | name
policy-name [ seq-number ] ] [ | { begin |
exclude | include } regular-expression ]
Available in any view
Display IPsec policy template
information.
display ipsec policy-template [ brief |
name template-name [ seq-number ] ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Display IPsec proposal
information.
display ipsec proposal [ proposal-name ]
[ | { begin | exclude | include }
regular-expression ]
Available in any view
Display IPsec SA information.
display ipsec sa [ active | brief | policy
policy-name [ seq-number ] | remote
ip-address | standby ] [ | { begin |
exclude | include } regular-expression ]
Available in any view
Display IPsec packet statistics.
display ipsec statistics [ tunnel-id integer ]
[ | { begin | exclude | include }
regular-expression ]
Available in any view
Display IPsec tunnel information.
display ipsec tunnel [ active | standby ]
[ | { begin | exclude | include }
regular-expression ]
Available in any view
Clear SAs.
reset ipsec sa [ active | parameters
dest-address protocol spi | policy
policy-name [ seq-number ] | remote
ip-address | standby ]
Available in user view
Clear IPsec statistics. reset ipsec statistics Available in user view
Configuration example for IPsec between AC and
AP
For more information, see the configuration example for CAPWAP tunnel encryption with IPsec in WLAN
Configuration Guide.