257• clear—Clears the DF bit in the new header.• set—Sets the DF bit in the new header.• copy—Copies the DF bit in the original IP header to the new IP header.You can configure the DF bit in system view and interface view. The interface-view DF bit setting takesprecedence over the system-view DF bit setting. If the interface-view DF bit setting is not configured, theinterface uses the system-view DF bit setting.Follow these guidelines when you configure the DF bit:• The DF bit setting takes effect only in tunnel mode, and it changes the DF bit in the new IP headerrather than the original IP header.• Configure the same DF bit setting on the interfaces where the same IPsec policy bound to a sourceinterface has been applied.To configure the DF bit of IPsec packets on an interface:Step Command Remarks1. Enter system view. system-view N/A2. Enter interface view. interface interface-typeinterface-number N/A3. Configure the DF bit ofIPsec packets on theinterface.ipsec df-bit { clear | copy | set } By default, the interface uses theglobal DF bit setting.To configure the DF bit of IPsec packets globally:Step Command Remarks1. Enter system view. system-view N/A2. Configure the DF bit ofIPsec packets globally. ipsec global-df-bit { clear | copy | set }By default, IPsec copies the DF bitin the original IP header to thenew IP header.Displaying and maintaining IPsecExecute display commands in any view and reset commands in user view.Task CommandDisplay IPsec policy information. display ipsec { ipv6-policy | policy } [ policy-name[ seq-number ] ]Display IPsec policy template information. display ipsec { ipv6-policy-template | policy-template }[ template-name [ seq-number ] ]Display IPsec profile information. display ipsec profile [ profile-name ]Display IPsec transform set information. display ipsec transform-set [ transform-set-name ]
