HP 1606 Fabric OS FCIP Administrators Guide v6.4.0 (53-1001766-01, November 20 - Page 63

Displaying IKE and IPsec policy settings, Deleting an IKE and IPsec policy

Get HP 1606 PDF manuals and user guides View all HP 1606 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 63 highlights

IPSec implementation over FCIP 3 IKE Policy 10 Authentication Algorithm: MD5 Encryption: 3DES Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 Operation Succeeded Displaying IKE and IPsec policy settings 1. Connect to the switch and log in using an account assigned to the admin role. 2. Display the settings for a single policy by entering the following command: policy --show type number For example, to view the IPsec 1 policy, type: policy --show ipsec 1 3. Display the policy settings for all defined policies by entering the following command: policy --show type all The example below shows all of the IKE policies defined; in this example, there are two IKE policies. switch:admin> policy --show ike all IKE Policy 1 Authentication Algorithm: MD5 Encryption: 3DES Perfect Forward Secrecy: off Diffie-Hellman Group: 1 SA Life (seconds): 0 IKE Policy 32 Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 Operation Succeeded Deleting an IKE and IPsec policy Policies cannot be modified. You must delete and then recreate a policy with the new parameters. 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the following command. policy --delete type number Fabric OS FCIP Administrator's Guide 49 53-1001766-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
Fabric OS FCIP Administrator’s Guide
49
53-1001766-01
IPSec implementation over FCIP
3
IKE Policy 10
-----------------------------------------
Authentication Algorithm: MD5
Encryption: 3DES
Perfect Forward Secrecy: on
Diffie-Hellman Group: 1
SA Life (seconds): 28800
Operation Succeeded
Displaying IKE and IPsec policy settings
1.
Connect to the switch and log in using an account assigned to the admin role.
2.
Display the settings for a single policy by entering the following command:
policy --show
type
number
For example, to view the IPsec 1 policy, type:
policy --show ipsec 1
3.
Display the policy settings for all defined policies by entering the following command:
policy --show
type
all
The example below shows all of the IKE policies defined; in this example, there are two IKE
policies.
switch:admin>
policy --show ike all
IKE Policy 1
-----------------------------------------
Authentication Algorithm: MD5
Encryption: 3DES
Perfect Forward Secrecy: off
Diffie-Hellman Group: 1
SA Life (seconds): 0
IKE Policy 32
-----------------------------------------
Authentication Algorithm: SHA-1
Encryption: AES-128
Perfect Forward Secrecy: on
Diffie-Hellman Group: 1
SA Life (seconds): 28800
Operation Succeeded
Deleting an IKE and IPsec policy
Policies cannot be modified. You must delete and then recreate a policy with the new parameters.
1.
Connect to the switch and log in using an account assigned to the admin role.
2.
Enter the following command.
policy --delete
type
number