src/vnet/ipsec

clear ipsec counters

Summary/usage

clear ipsec counters.

Declaration and implementation

Declaration: clear_ipsec_counters_command (src/vnet/ipsec/ipsec_cli.c line 875)

Implementation: clear_ipsec_counters_command_fn.

create ipsec tunnel

Summary/usage

create ipsec tunnel local-ip <addr> local-spi <spi> remote-ip <addr> remote-spi <spi> [instance <inst_num>] [udp-encap] [tx-table <table-id>].

Declaration and implementation

Declaration: create_ipsec_tunnel_command (src/vnet/ipsec/ipsec_cli.c line 961)

Implementation: create_ipsec_tunnel_command_fn.

ikev2 initiate

Summary/usage

ikev2 initiate sa-init <profile id>

ikev2 initiate del-child-sa <child sa="" ispi>=""> ikev2 initiate del-sa <sa ispi>=""> ikev2 initiate rekey-child-sa <profile id>=""> <child sa="" ispi>="">

Declaration and implementation

Declaration: ikev2_initiate_command (src/vnet/ipsec/ikev2_cli.c line 576)

Implementation: ikev2_initiate_command_fn.

ikev2 profile

Summary/usage

ikev2 profile [add|del] <id>

ikev2 profile set <id> auth [rsa-sig|shared-key-mic] [cert-file|string|hex] <data> ikev2 profile set <id> id <local|remote> <type> <data> ikev2 profile set <id> traffic-selector <local|remote> ip-range <start-addr> - <end-addr> port-range <start-port> - <end-port> protocol <protocol-number> ikev2 profile set <id> responder <interface> <addr> ikev2 profile set <id> ike-crypto-alg <crypto alg>=""> <key size>=""> ike-integ-alg <integ alg>=""> ike-dh <dh type>=""> ikev2 profile set <id> esp-crypto-alg <crypto alg>=""> <key size>=""> esp-integ-alg <integ alg>=""> esp-dh <dh type>=""> ikev2 profile set <id> sa-lifetime <seconds> <jitter> <handover> <max bytes>="">.

Declaration and implementation

Declaration: ikev2_profile_add_del_command (src/vnet/ipsec/ikev2_cli.c line 380)

Implementation: ikev2_profile_add_del_command_fn.

ipsec policy

Summary/usage

ipsec policy [add|del] spd <id> priority <n> .

Declaration and implementation

Declaration: ipsec_policy_add_del_command (src/vnet/ipsec/ipsec_cli.c line 380)

Implementation: ipsec_policy_add_del_command_fn.

ipsec sa

Summary/usage

ipsec sa [add|del].

Declaration and implementation

Declaration: ipsec_sa_add_del_command (src/vnet/ipsec/ipsec_cli.c line 193)

Implementation: ipsec_sa_add_del_command_fn.

ipsec select backend

Summary/usage

ipsec select backend <ah|esp> <backend index>.

Declaration and implementation

Declaration: ipsec_select_backend_command (src/vnet/ipsec/ipsec_cli.c line 846)

Implementation: ipsec_select_backend_command_fn.

ipsec spd

Summary/usage

ipsec spd [add|del] <id>.

Declaration and implementation

Declaration: ipsec_spd_add_del_command (src/vnet/ipsec/ipsec_cli.c line 245)

Implementation: ipsec_spd_add_del_command_fn.

set ikev2 local key

Summary/usage

set ikev2 local key <file>.

Declaration and implementation

Declaration: set_ikev2_local_key_command (src/vnet/ipsec/ikev2_cli.c line 515)

Implementation: set_ikev2_local_key_command_fn.

set interface ipsec key

Summary/usage

set interface ipsec key <int> <local|remote> <crypto|integ> <key type> <key>.

Declaration and implementation

Declaration: set_interface_key_command (src/vnet/ipsec/ipsec_cli.c line 1045)

Implementation: set_interface_key_command_fn.

set interface ipsec spd

Summary/usage

set interface ipsec spd <int> <id>.

Declaration and implementation

Declaration: set_interface_spd_command (src/vnet/ipsec/ipsec_cli.c line 63)

Implementation: set_interface_spd_command_fn.

set ipsec sa

Summary/usage

set ipsec sa <id> crypto-key <key> integ-key <key>.

Declaration and implementation

Declaration: set_ipsec_sa_key_command (src/vnet/ipsec/ipsec_cli.c line 442)

Implementation: set_ipsec_sa_key_command_fn.

show ikev2 profile

Summary/usage

show ikev2 profile.

Declaration and implementation

Declaration: show_ikev2_profile_command (src/vnet/ipsec/ikev2_cli.c line 475)

Implementation: show_ikev2_profile_command_fn.

show ikev2 sa

Summary/usage

show ikev2 sa.

Declaration and implementation

Declaration: show_ikev2_sa_command (src/vnet/ipsec/ikev2_cli.c line 164)

Implementation: show_ikev2_sa_command_fn.

show ipsec

Summary/usage

show ipsec [backends].

Declaration and implementation

Declaration: show_ipsec_command (src/vnet/ipsec/ipsec_cli.c line 710)

Implementation: show_ipsec_command_fn.

show ipsec backends

Summary/usage

show ipsec backends.

Declaration and implementation

Declaration: ipsec_show_backends_command (src/vnet/ipsec/ipsec_cli.c line 777)

Implementation: ipsec_show_backends_command_fn.