ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka stáhnout pdf (Strana 143)

Chapter 16 IPSec VPN

ZyWALL (ZLD) CLI Reference Guide

143

16.2.5 SA Monitor Commands

This table lists the commands for the SA monitor.

[no] crypto map_name Adds the specified IPSec SA to the specified VPN

concentrator. The

no command removes the

specified IPSec SA from the specified VPN

concentrator.

vpn-concentrator rename profile_name

profile_name

Renames the specified VPN concentrator (first

profile_name) to the specified name (second

profile_name).

Table 71 vpn-concentrator Commands: VPN Concentrator (continued)

COMMAND DESCRIPTION

Table 72 sa Commands: SA Monitor

COMMAND DESCRIPTION

show sa monitor [{begin

<1..1000>} | {end

<1..1000>} | {crypto-map

regexp} | {policy regexp}

|{rsort sort_order} |

{sort sort_order}]

Displays the current IPSec SAs and the status of each one. You can specify a

range of SA entries to display. You can also control the sort order of the

display and search by VPN connection or (local or remote) policy.

regexp: A keyword or regular expression. Use up to 30 alphanumeric and

_+-.()!$*^:?|{}[]<>/ characters.

A question mark (?) lets a single character in the VPN connection or policy

name vary. For example, use “a?c” (without the quotation marks) to specify

abc, acc and so on.

Wildcards (*) let multiple VPN connection or policy names match the pattern.

For example, use “*abc” (without the quotation marks) to specify any VPN

connection or policy name that ends with “abc”. A VPN connection named

“testabc” would match. There could be any number (of any type) of

characters in front of the “abc” at the end and the VPN connection or policy

name would still match. A VPN connection or policy name named “testacc”

for example would not match.

A * in the middle of a VPN connection or policy name has the ZyWALL check

the beginning and end and ignore the middle. For example, with “abc*123”,

any VPN connection or policy name starting with “abc” and ending in “123”

matches, no matter how many characters are in between.

The whole VPN connection or policy name has to match if you do not use a

question mark or asterisk.

See Table 67 on page 136 for other parameter description.

show isakmp sa Displays current IKE SA and the status of each one.

no sa spi spi Deletes the SA specified by the SPI.

spi: 2-8 hexadecimal (0-9, A-F) characters

no sa tunnel-name map_name Deletes the specified IPSec SA.

show vpn-counters Displays VPN traffic statistics.

1 2 ... 138 139 140 141 142 143 144 145 146 147 148 ... 385 386

Komentáře k této Příručce

Žádné komentáře

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka Strana 143

Komentáře k této Příručce

Související produkty a manuály pro Brány / ovladače ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1