H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 390)

376
Step Command Remarks
1. Enter system view. system-view N/A
2. Disable Next payload field
checking.
ike next-payload check disabled Enabled by default
Displaying and maintaining IKE
Task Command Remarks
Display IKE DPD information.
display ike dpd [ dpd-name ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Display IKE peer information.
display ike peer [ peer-name ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Display IKE SA information.
display ike sa [ active | standby |
verbose [ connection-id
connection-id | remote-address
remote-address ] ] [ | { begin |
exclude | include }
regular-expression ]
Available in any view
Display IKE proposal information.
display ike proposal [ | { begin |
exclude | include }
regular-expression ]
Available in any view
Clear SAs established by IKE.
reset ike sa [ connection-id | active
| standby ]
Available in user view
IKE configuration example
For information about the IKE configuration example, see the configuration example for CAPWAP tunnel
encryption with IPsec in WLAN Configuration Guide.
Troubleshooting IKE
When you configure parameters to establish an IPsec tunnel, enable IKE error debugging to locate
configuration problems:
debugging ike error
Proposal mismatch
Symptom
The proposals mismatch.
Analysis
The following is the debugging information:
got NOTIFY of type NO_PROPOSAL_CHOSEN