Home » Dell Manuals » Hubs & Switches » Dell S3100 » Manual Viewer

Dell S3100 EMC Command Line Reference Guide for the Series 9.14.1.5 - Page 795

crypto ipsec policy

Add to My Manuals
Save this manual to your list of manuals

Page 795 highlights

Version 9.10(0.0) 9.8(2.0) 9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0) Description Introduced on the S3148. Introduced on the S3100 series. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500. Usage Information • Both sides of the link must specify the same transform set. • You can create up to 64 transform sets. Example Dell(conf)# do show crypto ipsec transform-set Transform-Set Name Transform-Set refCnt AH Transform ESP Auth Transform ESP Encry Transform : ts1 : 0 : md5 : : Dell(conf)# crypto ipsec policy Create a crypto policy used by ipsec. Syntax crypto ipsec policy name seq-num ipsec-manual To delete a crypto policy entry, use the no crypto ipsec policy name seq-num ipsec-manual command. Parameters name seq-num Enter the name for the crypto policy set. Enter the sequence number assigned to the crypto policy entry. Defaults Command Modes Command History None CONFIGURATION This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version 9.10(0.0) 9.8(2.0) 9.8(0.0P5) Description Introduced on the S3148. Introduced on the S3100 series. Introduced on the S4048-ON. Internet Protocol Security (IPSec) 795

Section	Page
Dell EMC Command Line Reference Guide for the S3100 Series 9.14.1.5	3
About this Guide	43
Objectives	43
Audience	43
Conventions	43
CLI Basics	44
Accessing the Command Line	44
Multiple Configuration Users	44
Obtaining Help	45
Navigating the CLI	46
Using the no Command	47
Filtering show Commands	47
Enabling Software Features on Devices Using a Command Option	48
feature vrf	48
show feature	49
Command Modes	50
File Management	60
boot system	60
cd	62
copy	63
delete	65
dir	66
format	68
fsck flash	69
mkdir	70
mount nfs	70
rmdir	71
upgrade system	72
rename	75
restore factory-defaults	75
show boot system	78
show bootvar	79
show file-systems	80
show os-version	81
show running-config	83
show startup-config	87
show version	88
upgrade	90
Control and Monitoring	92
banner exec	92
banner login	93
banner motd	95
cam-acl	96
cam-acl-vlan	98
clear average-power	98
clear line	99
configure	100
disable	101
do	102
enable	103
enable optic-info-update interval	104
end	105
exec-timeout	106
exit	107
ftp-server enable	108
ftp-server topdir	109
ftp-server username	110
hostname	111
ip http source-interface	112
ip http vrf	113
ip ftp password	114
ip ftp source-interface	115
ip ftp username	116
ip ftp vrf	117
ip telnet server enable	118
ip telnet server vrf	119
ip telnet source-interface	120
ip telnet vrf	121
ip tftp source-interface	122
ip tftp vrf	123
line	124
login concurrent-session	125
login statistics	126
motd-banner	128
ping	129
reload	132
send	133
service timestamps	134
show alarms	135
show cam-acl-vlan	137
show command-history	137
show cpu-traffic-stats	139
show debugging	141
show environment	142
show inventory	143
show login statistics	145
show memory	147
show processes cpu	148
show processes ipc flow-control	151
show processes memory	153
show reset-reason	155
show software ifm	156
show system	158
show tech-support	159
ssh-peer-stack-unit	163
telnet	164
telnet-peer-stack-unit	166
terminal length	166
traceroute	167
undebug all	169
virtual-ip	170
write	171
802.1X	173
dot1x critical-vlan	174
debug dot1x	175
dot1x auth-fail-vlan	176
dot1x auth-server	177
dot1x auth-type mab-only	178
dot1x authentication (Configuration)	179
dot1x authentication (Interface)	179
dot1x guest-vlan	180
dot1x host-mode	182
dot1x mac-auth-bypass	183
dot1x max-eap-req	183
dot1x max-supplicants	184
dot1x port-control	185
dot1x profile	186
dot1x quiet-period	187
dot1x reauthentication	188
dot1x reauth-max	188
dot1x server-timeout	189
dot1x static-mab	190
dot1x supplicant-timeout	192
dot1x tx-period	192
mac	193
show dot1x cos-mapping interface	194
show dot1x interface	196
show dot1x profile	198
Access Control Lists (ACL)	200
Commands Common to all ACL Types	201
remark	201
show config	203
Common IP ACL Commands	204
access-class	204
clear counters ip access-group	206
ip access-group	206
ip control-plane egress-filter	208
show ip accounting access-list	209
show ip access-lists	211
Standard IP ACL Commands	211
deny	212
ip access-list standard	213
permit	215
resequence access-list	216
seq	218
Extended IP ACL Commands	220
deny	220
deny icmp	222
deny tcp	224
deny udp	228
ip access-list extended	231
permit	232
permit tcp	234
permit udp	237
resequence access-list	240
seq	241
Common MAC Access List Commands	244
clear counters mac access-group	244
mac access-group	245
show mac access-lists	247
show mac accounting access-list	248
Standard MAC ACL Commands	249
deny	249
mac access-list standard	251
permit	252
seq	253
Extended MAC ACL Commands	255
deny	255
mac access-list extended	257
permit	258
IP Prefix List Commands	260
clear ip prefix-list	260
deny	261
ip prefix-list	262
seq	263
show config	265
show ip prefix-list detail	265
show ip prefix-list summary	266
Route Map Commands	267
continue	268
description	269
match as-path	270
match community	271
match interface	272
match ip address	273
match ip next-hop	274
match ip route-source	275
match metric	276
match origin	277
match route-type	278
match tag	279
route-map	280
set as-path	282
set automatic-tag	283
set comm-list delete	284
set community	285
set level	286
set local-preference	287
set metric	288
set metric-type	289
set next-hop	290
set origin	291
set tag	292
set weight	293
show config	294
show route-map	295
AS-Path Commands	296
ip as-path access-list	296
show ip as-path-access-lists	297
IP Community List Commands	298
ip community-list	298
show ip community-lists	299
deny (for Standard IP ACLs)	300
deny (for Extended IP ACLs)	301
seq (for Standard IPv4 ACLs)	303
deny tcp (for Extended IP ACLs)	304
deny udp (for Extended IP ACLs)	306
deny arp (for Extended MAC ACLs)	308
deny icmp (for Extended IP ACLs)	309
deny ether-type (for Extended MAC ACLs)	311
deny (for Standard MAC ACLs)	312
deny (for Extended MAC ACLs)	313
permit (for Standard IP ACLs)	315
permit arp (for Extended MAC ACLs)	316
permit ether-type (for Extended MAC ACLs)	318
permit icmp (for Extended IP ACLs)	319
permit udp (for Extended IP ACLs)	321
permit (for Extended IP ACLs)	323
permit (for Standard MAC ACLs)	325
seq (for Standard MAC ACLs)	326
permit tcp (for Extended IP ACLs)	327
seq arp (for Extended MAC ACLs)	329
seq ether-type (for Extended MAC ACLs)	331
seq (for IP ACLs)	332
seq (for IPv6 ACLs)	334
permit udp (for IPv6 ACLs)	336
permit tcp (for IPv6 ACLs)	338
permit icmp (for IPv6 ACLs)	340
permit (for IPv6 ACLs)	342
deny udp (for IPv6 ACLs)	344
deny tcp (for IPv6 ACLs)	345
deny icmp (for Extended IPv6 ACLs)	348
deny (for IPv6 ACLs)	350
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)	352
member vlan	352
ip access-group	353
show acl-vlan-group	353
show cam-acl-vlan	355
cam-acl-vlan	356
show cam-usage	356
show running config acl-vlan-group	359
acl-vlan-group	359
show acl-vlan-group detail	360
description (ACL VLAN Group)	361
Bidirectional Forwarding Detection (BFD)	363
bfd all-neighbors	363
bfd disable	365
bfd enable (Configuration)	366
bfd enable (Interface)	366
bfd interval	367
bfd protocol-liveness	368
ip route bfd	369
ip ospf bfd all-neighbors	370
ipv6 ospf bfd all-neighbors	371
ipv6 route bfd	372
isis bfd all-neighbors	373
neighbor bfd	375
neighbor bfd disable	376
show bfd neighbors	377
vrrp bfd neighbor	379
Border Gateway Protocol	380
BGP IPv4 Commands	380
address-family	380
aggregate-address	381
bgp add-path	383
bgp always-compare-med	384
bgp asnotation	385
bgp bestpath as-path ignore	386
bgp bestpath as-path multipath-relax	387
bgp bestpath med confed	387
bgp bestpath med missing-as-best	388
bgp bestpath router-id ignore	389
bgp client-to-client reflection	390
bgp cluster-id	391
bgp confederation identifier	392
bgp confederation peers	393
bgp connection-retry-timer	394
bgp dampening	394
bgp default local-preference	396
bgp dmzlink-bw	397
bgp enforce-first-as	398
bgp fast-external-fallover	399
bgp four-octet-as-support	400
bgp graceful-restart	401
bgp non-deterministic-med	402
bgp outbound-optimization	403
bgp outbound-optimization	403
bgp recursive-bgp-next-hop	404
bgp regex-eval-optz-disable	405
bgp router-id	406
clear ip bgp	407
clear ip bgp dampening	409
clear ip bgp flap-statistics	410
clear ip bgp peer-group	412
deny bandwidth	413
debug ip bgp	414
debug ip bgp dampening	415
debug ip bgp events	416
debug ip bgp keepalives	418
debug ip bgp notifications	419
debug ip bgp soft-reconfiguration	420
debug ip bgp updates	421
default-metric	422
description	423
maximum-paths	424
neighbor activate	425
neighbor add-path	427
neighbor advertisement-interval	428
neighbor advertisement-start	429
neighbor allowas-in	430
neighbor default-originate	431
neighbor description	432
neighbor distribute-list	433
neighbor ebgp-multihop	434
neighbor fall-over	435
neighbor local-as	436
neighbor maximum-prefix	437
neighbor next-hop-self	438
neighbor password	439
neighbor peer-group (assigning peers)	440
neighbor peer-group (creating group)	442
neighbor peer-group passive	443
neighbor remote-as	444
neighbor remove-private-as	445
neighbor route-map	446
neighbor route-reflector-client	447
neighbor sender-side-loopdetect	448
neighbor send-community	449
neighbor shutdown	451
neighbor soft-reconfiguration inbound	452
neighbor timers	453
neighbor timers extended	454
neighbor update-source	455
neighbor weight	456
network	457
network backdoor	458
permit bandwidth	459
redistribute	460
redistribute ospf	462
router bgp	463
shutdown all	464
shutdown address-family-ipv4–multicast	464
shutdown address-family-ipv4–unicast	465
shutdown address-family-ipv6–unicast	465
set extcommunity bandwidth	466
show capture bgp-pdu neighbor	466
show config	468
show ip bgp	468
show ip bgp cluster-list	473
show ip bgp community	474
show ip bgp community-list	477
show ip bgp dampened-paths	479
show ip bgp detail	480
show ip bgp extcommunity-list	482
show ip bgp filter-list	483
show ip bgp flap-statistics	485
show ip bgp inconsistent-as	487
show ip bgp neighbors	489
show ip bgp next-hop	492
show ip bgp paths	493
show ip bgp paths community	495
show ip bgp peer-group	496
show ip bgp regexp	498
show ip bgp summary	500
show running-config bgp	503
timers bgp	504
timers bgp extended	505
MBGP Commands	505
debug ip bgp dampening	506
distance bgp	507
show ip bgp dampened-paths	508
BGP Extended Communities (RFC 4360)	509
set extcommunity rt	510
set extcommunity soo	511
show ip bgp paths extcommunity	512
show ip extcommunity-list	513
IPv6 BGP Commands	514
clear ip bgp ipv6 unicast soft	514
debug ip bgp ipv6 unicast soft-reconfiguration	515
ipv6 prefix-list	516
neighbor soft-reconfiguration inbound	517
show ipv6 prefix-list	518
IPv6 MBGP Commands	518
show ipv6 mbgproutes	518
Content Addressable Memory (CAM)	520
CAM Profile Commands	520
cam-acl (Configuration)	520
cam-acl-egress	523
cam-optimization	524
cam-threshold	525
show cam-acl	526
show cam-usage	528
test cam-usage	529
Control Plane Policing (CoPP)	532
control-plane-cpuqos	532
service-policy rate-limit-cpu-queues	533
service-policy rate-limit-protocols	534
ip unknown-unicast	535
ipv6 unknown-unicast	536
show cpu-queue rate cp	536
show ip protocol-queue-mapping	537
show ipv6 protocol-queue-mapping	538
show mac protocol-queue-mapping	539
Debugging and Diagnostics	541
Diagnostics and Monitoring Commands	541
logging coredump stack-unit	541
Offline Diagnostic Commands	542
diag stack-unit	542
offline stack-unit	544
online stack-unit	545
Hardware Commands	546
clear hardware stack-unit	546
clear hardware system-flow	547
clear hardware vlan-counters	548
hardware watchdog	548
show hardware mac	549
show hardware ip	550
show hardware stack-unit	551
show hardware buffer interface	559
show hardware counters interface	560
show hardware buffer-stats-snapshot	562
show hardware stack-unit buffer-stats-snapshot (Total Buffer Information)	563
show hardware system-flow	564
show hardware vlan-counters	566
show hardware drops	567
Dynamic Host Configuration Protocol (DHCP)	570
Commands to Configure the System to be a DHCP Server	570
clear ip dhcp	570
debug ip dhcp server	571
debug ipv6 dhcp	572
default-router	572
disable	573
dns-server	574
domain-name	575
excluded-address	576
hardware-address	577
host-address	577
ip dhcp server	578
lease	579
netbios-name-server	580
netbios-node-type	581
network	582
pool	582
show ip dhcp binding	583
show ip dhcp configuration	584
show ip dhcp conflict	585
show ip dhcp server	586
Commands to Configure Secure DHCP	587
arp inspection	587
arp inspection-limit	588
arp inspection-trust	588
clear ip dhcp snooping	589
clear ipv6 dhcp snooping binding	590
ip dhcp relay	591
ip dhcp snooping	592
ipv6 dhcp snooping	593
ipv6 dhcp snooping vlan	593
ip dhcp snooping binding	594
IPv6 DHCP Snooping Binding	595
ip dhcp snooping database	597
ipv6 dhcp snooping database write-delay	597
ip dhcp snooping database renew	598
ipv6 dhcp snooping database renew	599
ip dhcp snooping trust	599
ipv6 dhcp snooping trust	600
ip dhcp source-address-validation	601
ip dhcp relay information-option	602
ip dhcp relay source-interface	603
ipv6 dhcp relay source-interface	604
ip dhcp snooping verify mac-address	605
ipv6 dhcp snooping verify mac-address	606
ip helper-address	606
ipv6 helper-address	607
show ip dhcp snooping	608
show ipv6 dhcp snooping	610
Commands to Configure DNS	611
ip name-server	611
ip domain-name	612
ip domain-list	613
ip host	614
clear host	615
Equal Cost Multi-Path (ECMP)	616
ecmp-group	616
hash-algorithm	617
ip ecmp-group	619
ip ecmp weighted	620
link-bundle-monitor enable	621
link-bundle-distribution trigger-threshold	622
show config	623
show link-bundle distribution	623