src/vnet/ipsec

clear ipsec counters

Summary/usage

clear ipsec counters.

Declaration and implementation

Declaration: clear_ipsec_counters_command (src/vnet/ipsec/ipsec_cli.c line 731)

Implementation: clear_ipsec_counters_command_fn.

create ipsec tunnel

Summary/usage

create ipsec tunnel local-ip <addr> local-spi <spi> remote-ip <addr> remote-spi <spi> [instance <inst_num>] [udp-encap].

Declaration and implementation

Declaration: create_ipsec_tunnel_command (src/vnet/ipsec/ipsec_cli.c line 815)

Implementation: create_ipsec_tunnel_command_fn.

ikev2 initiate

Summary/usage

ikev2 initiate sa-init <profile id>nikev2 initiate del-child-sa <child sa ispi>nikev2 initiate del-sa <sa ispi>nikev2 initiate rekey-child-sa <profile id> <child sa ispi>n.

Declaration and implementation

Declaration: ikev2_initiate_command (src/vnet/ipsec/ikev2_cli.c line 576)

Implementation: ikev2_initiate_command_fn.

ikev2 profile

Summary/usage

ikev2 profile [add|del] <id>nikev2 profile set <id> auth [rsa-sig|shared-key-mic] [cert-file|string|hex] <data>nikev2 profile set <id> id <local|remote> <type> <data>nikev2 profile set <id> traffic-selector <local|remote> ip-range <start-addr> - <end-addr> port-range <start-port> - <end-port> protocol <protocol-number>nikev2 profile set <id> responder <interface> <addr>nikev2 profile set <id> ike-crypto-alg <crypto alg> <key size> ike-integ-alg <integ alg> ike-dh <dh type>nikev2 profile set <id> esp-crypto-alg <crypto alg> <key size> esp-integ-alg <integ alg> esp-dh <dh type>nikev2 profile set <id> sa-lifetime <seconds> <jitter> <handover> <max bytes>.

Declaration and implementation

Declaration: ikev2_profile_add_del_command (src/vnet/ipsec/ikev2_cli.c line 380)

Implementation: ikev2_profile_add_del_command_fn.

ipsec policy

Summary/usage

ipsec policy [add|del] spd <id> priority <n> .

Declaration and implementation

Declaration: ipsec_policy_add_del_command (src/vnet/ipsec/ipsec_cli.c line 379)

Implementation: ipsec_policy_add_del_command_fn.

ipsec sa

Summary/usage

ipsec sa [add|del].

Declaration and implementation

Declaration: ipsec_sa_add_del_command (src/vnet/ipsec/ipsec_cli.c line 192)

Implementation: ipsec_sa_add_del_command_fn.

ipsec spd

Summary/usage

ipsec spd [add|del] <id>.

Declaration and implementation

Declaration: ipsec_spd_add_del_command (src/vnet/ipsec/ipsec_cli.c line 244)

Implementation: ipsec_spd_add_del_command_fn.

set ikev2 local key

Summary/usage

set ikev2 local key <file>.

Declaration and implementation

Declaration: set_ikev2_local_key_command (src/vnet/ipsec/ikev2_cli.c line 515)

Implementation: set_ikev2_local_key_command_fn.

set interface ipsec key

Summary/usage

set interface ipsec key <int> <local|remote> <crypto|integ> <key type> <key>.

Declaration and implementation

Declaration: set_interface_key_command (src/vnet/ipsec/ipsec_cli.c line 897)

Implementation: set_interface_key_command_fn.

set interface ipsec spd

Summary/usage

set interface ipsec spd <int> <id>.

Declaration and implementation

Declaration: set_interface_spd_command (src/vnet/ipsec/ipsec_cli.c line 62)

Implementation: set_interface_spd_command_fn.

set ipsec sa

Summary/usage

set ipsec sa <id> crypto-key <key> integ-key <key>.

Declaration and implementation

Declaration: set_ipsec_sa_key_command (src/vnet/ipsec/ipsec_cli.c line 441)

Implementation: set_ipsec_sa_key_command_fn.

show ikev2 profile

Summary/usage

show ikev2 profile.

Declaration and implementation

Declaration: show_ikev2_profile_command (src/vnet/ipsec/ikev2_cli.c line 475)

Implementation: show_ikev2_profile_command_fn.

show ikev2 sa

Summary/usage

show ikev2 sa.

Declaration and implementation

Declaration: show_ikev2_sa_command (src/vnet/ipsec/ikev2_cli.c line 164)

Implementation: show_ikev2_sa_command_fn.

show ipsec

Summary/usage

show ipsec.

Declaration and implementation

Declaration: show_ipsec_command (src/vnet/ipsec/ipsec_cli.c line 703)

Implementation: show_ipsec_command_fn.