3Com Router 3000 Ethernet FamilyConfiguration Guide Chapter 7 IPSec Configuration3Com Corporation7-28Table 7-32 Clear IPSec packet statisticsOperation CommandClear IPSec packet statistical information reset ipsec statisticsIII. Deleting SAThe configuration is used to delete the established SA (either manually or through IKEnegotiation). If no parameter is specified, all the SAs will be deleted.Perform the following configuration in user view.Table 7-33 Delete SAOperation CommandDelete SA reset ipsec sa [ remote ip-address | policy policy-name[ seq-number ] | parameters dest-address protocol spi ]If a packet re-triggers IKE negotiation after an SA set up through IKE negotiation isdeleted, IKE will reestablish an SA through negotiation.If an SA set up manually is deleted, the system will automatically set up a new SAaccording to the parameter manually set up.The keyword parameters will take effect only after the spi of the outbound SA isdefined. Because SAs appear in pairs, the inbound SA will also be deleted after theoutbound SA is deleted.7.3.2 Displaying and Debugging Encryption Card InformationI. Displaying and debugging IPSec information on encryption cardsYou can view the IPSec configurations, including SA information, statistics, log,interface information and IPSec module backup function, on the encryption card usingdisplay commands.Execute the debugging command in user view for the debugging of IPSecconfiguration.Table 7-34 Display and debug encryption card configurationOperation CommandDisplay SA information on theencryption card display encrypt-card sa [slot-id ]Display statistics on the encryptioncard display encrypt-card statistics [slot-id ]
