diagnose vpn ike
IKE
This topic includes the following commands:
- diagnose vpn ike admin
- diagnose vpn ike config
- diagnose vpn ike config list
- diagnose vpn ike config list summary
- diagnose vpn ike counts
- diagnose vpn ike crash
- diagnose vpn ike crypto
- diagnose vpn ike crypto stats
- diagnose vpn ike errors
- diagnose vpn ike fragmentation-override
- diagnose vpn ike gateway
- diagnose vpn ike gateway clear
- diagnose vpn ike gateway clear name
- diagnose vpn ike gateway filter
- diagnose vpn ike gateway filter clear
- diagnose vpn ike gateway filter dst-port
- diagnose vpn ike gateway filter ifindex
- diagnose vpn ike gateway filter loc-addr4
- diagnose vpn ike gateway filter loc-addr6
- diagnose vpn ike gateway filter name
- diagnose vpn ike gateway filter negate
- diagnose vpn ike gateway filter negate dst-port
- diagnose vpn ike gateway filter negate ifindex
- diagnose vpn ike gateway filter negate loc-addr4
- diagnose vpn ike gateway filter negate loc-addr6
- diagnose vpn ike gateway filter negate name
- diagnose vpn ike gateway filter negate rem-addr4
- diagnose vpn ike gateway filter negate rem-addr6
- diagnose vpn ike gateway filter negate vd
- diagnose vpn ike gateway filter rem-addr4
- diagnose vpn ike gateway filter rem-addr6
- diagnose vpn ike gateway filter vd
- diagnose vpn ike gateway flush
- diagnose vpn ike gateway flush name
- diagnose vpn ike gateway list
- diagnose vpn ike gateway list name
- diagnose vpn ike ikev2-cookie-enforce
- diagnose vpn ike log
- diagnose vpn ike log filter
- diagnose vpn ike log filter clear
- diagnose vpn ike log filter dst-port
- diagnose vpn ike log filter ifindex
- diagnose vpn ike log filter list
- diagnose vpn ike log filter loc-addr4
- diagnose vpn ike log filter loc-addr6
- diagnose vpn ike log filter mloc-addr4
- diagnose vpn ike log filter mloc-addr6
- diagnose vpn ike log filter mrem-addr4
- diagnose vpn ike log filter mrem-addr6
- diagnose vpn ike log filter name
- diagnose vpn ike log filter negate
- diagnose vpn ike log filter negate dst-port
- diagnose vpn ike log filter negate ifindex
- diagnose vpn ike log filter negate loc-addr4
- diagnose vpn ike log filter negate loc-addr6
- diagnose vpn ike log filter negate mloc-addr4
- diagnose vpn ike log filter negate mloc-addr6
- diagnose vpn ike log filter negate mrem-addr4
- diagnose vpn ike log filter negate mrem-addr6
- diagnose vpn ike log filter negate name
- diagnose vpn ike log filter negate rem-addr4
- diagnose vpn ike log filter negate rem-addr6
- diagnose vpn ike log filter negate vd
- diagnose vpn ike log filter rem-addr4
- diagnose vpn ike log filter rem-addr6
- diagnose vpn ike log filter vd
- diagnose vpn ike log function-name
- diagnose vpn ike log function-name disable
- diagnose vpn ike log function-name enable
- diagnose vpn ike log terminal
- diagnose vpn ike log terminal clear
- diagnose vpn ike log terminal reset
- diagnose vpn ike log terminal stats
- diagnose vpn ike manager
- diagnose vpn ike qkd
- diagnose vpn ike restart
- diagnose vpn ike routes
- diagnose vpn ike routes list
- diagnose vpn ike secrets
- diagnose vpn ike stats
- diagnose vpn ike status
- diagnose vpn ike status detailed
- diagnose vpn ike status summary
- diagnose vpn ike valgrind
- diagnose vpn ike valgrind disable
- diagnose vpn ike valgrind enable
- diagnose vpn ike valgrind log
- diagnose vpn ike valgrind log clear
- diagnose vpn ike valgrind log show
- diagnose vpn ike valgrind memcheck
- diagnose vpn ike valgrind memcheck_less
- diagnose vpn ike valgrind status
diagnose vpn ike admin
IKE admin statistics.
diagnose vpn ike admin
diagnose vpn ike config
IKE configuration.
diagnose vpn ike config
diagnose vpn ike config list
List IKE configuration.
diagnose vpn ike config list
diagnose vpn ike config list summary
List IKE configuration summary.
diagnose vpn ike config list summary
diagnose vpn ike counts
IKE object counts.
diagnose vpn ike counts
diagnose vpn ike crash
IKE crash statistics.
diagnose vpn ike crash
diagnose vpn ike crypto
IKE crypto diagnostics.
diagnose vpn ike crypto
diagnose vpn ike crypto stats
IKE crypto statistics.
diagnose vpn ike crypto stats
diagnose vpn ike errors
IKE statistics.
diagnose vpn ike errors
diagnose vpn ike fragmentation-override
Override IKE fragmentation.
diagnose vpn ike fragmentation-override <flags>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<flags> |
Bitmask of fragmentation override flags. |
string |
|
diagnose vpn ike gateway
IKE gateways.
diagnose vpn ike gateway
diagnose vpn ike gateway clear
Clear IKE gateways.
diagnose vpn ike gateway clear
diagnose vpn ike gateway clear name
Clear gateway by name.
diagnose vpn ike gateway clear name <name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<name> |
Name of IKE gateway to clear. |
string |
|
diagnose vpn ike gateway filter
IKE filter.
diagnose vpn ike gateway filter
diagnose vpn ike gateway filter clear
Erase the current filter.
diagnose vpn ike gateway filter clear
diagnose vpn ike gateway filter dst-port
Destination port range to filter by.
diagnose vpn ike gateway filter dst-port <port>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<port> |
Destination port. |
string |
|
diagnose vpn ike gateway filter ifindex
Index of the interface that IKE connection is negotiated over.
diagnose vpn ike gateway filter ifindex <index>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<index> |
Interface index, 0 matches all. |
string |
|
diagnose vpn ike gateway filter loc-addr4
IPv4 local gateway address range to filter by.
diagnose vpn ike gateway filter loc-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Local gateway IPv4 address (from). |
string |
|
diagnose vpn ike gateway filter loc-addr6
IPv6 local gateway address range to filter by.
diagnose vpn ike gateway filter loc-addr6 <ipv6-address> <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Local gateway IPv6 address (from). |
string |
|
|
<ipv4-address> |
Local gateway IPv6 address (to). |
string |
|
diagnose vpn ike gateway filter name
Phase1 name to filter by.
diagnose vpn ike gateway filter name <name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<name> |
Name to filter by. |
string |
|
diagnose vpn ike gateway filter negate
Negate existing setting of the specified filter parameter.
diagnose vpn ike gateway filter negate
diagnose vpn ike gateway filter negate dst-port
Negate destination port.
diagnose vpn ike gateway filter negate dst-port
diagnose vpn ike gateway filter negate ifindex
Negate interface index.
diagnose vpn ike gateway filter negate ifindex
diagnose vpn ike gateway filter negate loc-addr4
Negate IPv4 local gateway address.
diagnose vpn ike gateway filter negate loc-addr4
diagnose vpn ike gateway filter negate loc-addr6
Negate IPv6 local gateway address.
diagnose vpn ike gateway filter negate loc-addr6
diagnose vpn ike gateway filter negate name
Negate name.
diagnose vpn ike gateway filter negate name
diagnose vpn ike gateway filter negate rem-addr4
Negate IPv4 remote gateway address.
diagnose vpn ike gateway filter negate rem-addr4
diagnose vpn ike gateway filter negate rem-addr6
Negate IPv6 remote gateway address.
diagnose vpn ike gateway filter negate rem-addr6
diagnose vpn ike gateway filter negate vd
Negate virtual domain.
diagnose vpn ike gateway filter negate vd
diagnose vpn ike gateway filter rem-addr4
IPv4 remote gateway address range to filter by.
diagnose vpn ike gateway filter rem-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Remote gateway IPv4 address (from). |
string |
|
diagnose vpn ike gateway filter rem-addr6
IPv6 remote gateway address range to filter by.
diagnose vpn ike gateway filter rem-addr6 <ipv6-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Remote gateway IPv6 address (from). |
string |
|
diagnose vpn ike gateway filter vd
Index of virtual domain. -1 matches all.
diagnose vpn ike gateway filter vd <index>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<index> |
Index of virtual domain. -1 matches all. |
string |
|
diagnose vpn ike gateway flush
Synonym for clear.
diagnose vpn ike gateway flush
diagnose vpn ike gateway flush name
Clear gateway by name.
diagnose vpn ike gateway flush name <name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<name> |
Name of IKE gateway to clear. |
string |
|
diagnose vpn ike gateway list
list
diagnose vpn ike gateway list
diagnose vpn ike gateway list name
List gateway by name.
diagnose vpn ike gateway list name <name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<name> |
Name of IKE gateway to list. |
string |
|
diagnose vpn ike ikev2-cookie-enforce
Set IKEv2 SA_INIT cookie enforcement.
diagnose vpn ike ikev2-cookie-enforce <enforce>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<enforce> |
Enable/Disable responder IKEv2 cookie. |
string |
|
diagnose vpn ike log
IKE debug log.
diagnose vpn ike log
diagnose vpn ike log filter
IKE debug log filter.
diagnose vpn ike log filter
diagnose vpn ike log filter clear
Erase the current filter.
diagnose vpn ike log filter clear
diagnose vpn ike log filter dst-port
Destination port range to filter by.
diagnose vpn ike log filter dst-port <port>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<port> |
Destination port. |
string |
|
diagnose vpn ike log filter ifindex
Index of the interface that IKE connection is negotiated over.
diagnose vpn ike log filter ifindex <index>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<index> |
Interface index, 0 matches all. |
string |
|
diagnose vpn ike log filter list
Display the current filter.
diagnose vpn ike log filter list
diagnose vpn ike log filter loc-addr4
IPv4 local gateway address range to filter by.
diagnose vpn ike log filter loc-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Local gateway IPv4 address (from). |
string |
|
diagnose vpn ike log filter loc-addr6
IPv6 local gateway address range to filter by.
diagnose vpn ike log filter loc-addr6 <ipv6-address> <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Local gateway IPv6 address (from). |
string |
|
|
<ipv4-address> |
Local gateway IPv6 address (to). |
string |
|
diagnose vpn ike log filter mloc-addr4
Multiple IPv4 local gateway address to filter by.
diagnose vpn ike log filter mloc-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Local gateway IPv4 address 1, up to 6 IP addresses |
string |
|
diagnose vpn ike log filter mloc-addr6
Multiple IPv6 local gateway address to filter by.
diagnose vpn ike log filter mloc-addr6 <ipv6-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Local gateway IPv6 address 1, up to 6 IP addresses |
string |
|
diagnose vpn ike log filter mrem-addr4
Multiple IPv4 remote gateway address to filter by.
diagnose vpn ike log filter mrem-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Remote gateway IPv4 address 1, up to 6 IP addresses |
string |
|
diagnose vpn ike log filter mrem-addr6
Multiple IPv6 remote gateway addresses to filter by.
diagnose vpn ike log filter mrem-addr6 <ipv6-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Remote gateway IPv6 address 1, up to 6 IP addresses |
string |
|
diagnose vpn ike log filter name
Phase1 name to filter by.
diagnose vpn ike log filter name <name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<name> |
Name to filter by. |
string |
|
diagnose vpn ike log filter negate
Negate existing setting of the specified filter parameter.
diagnose vpn ike log filter negate
diagnose vpn ike log filter negate dst-port
Negate destination port.
diagnose vpn ike log filter negate dst-port
diagnose vpn ike log filter negate ifindex
Negate interface index.
diagnose vpn ike log filter negate ifindex
diagnose vpn ike log filter negate loc-addr4
Negate IPv4 local gateway address.
diagnose vpn ike log filter negate loc-addr4
diagnose vpn ike log filter negate loc-addr6
Negate IPv6 local gateway address.
diagnose vpn ike log filter negate loc-addr6
diagnose vpn ike log filter negate mloc-addr4
Negate multiple IPv4 local gateway addresses.
diagnose vpn ike log filter negate mloc-addr4
diagnose vpn ike log filter negate mloc-addr6
Negate multiple IPv6 local gateway addresses.
diagnose vpn ike log filter negate mloc-addr6
diagnose vpn ike log filter negate mrem-addr4
Negate multiple IPv4 remote gateway addresses.
diagnose vpn ike log filter negate mrem-addr4
diagnose vpn ike log filter negate mrem-addr6
Negate multiple IPv6 remote gateway address.
diagnose vpn ike log filter negate mrem-addr6
diagnose vpn ike log filter negate name
Negate name.
diagnose vpn ike log filter negate name
diagnose vpn ike log filter negate rem-addr4
Negate IPv4 remote gateway address address.
diagnose vpn ike log filter negate rem-addr4
diagnose vpn ike log filter negate rem-addr6
Negate IPv6 remote gateway address.
diagnose vpn ike log filter negate rem-addr6
diagnose vpn ike log filter negate vd
Negate virtual domain.
diagnose vpn ike log filter negate vd
diagnose vpn ike log filter rem-addr4
IPv4 remote gateway address range to filter by.
diagnose vpn ike log filter rem-addr4 <ipv4-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv4-address> |
Remote gateway IPv4 address (from). |
string |
|
diagnose vpn ike log filter rem-addr6
IPv6 remote gateway address range to filter by.
diagnose vpn ike log filter rem-addr6 <ipv6-address>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<ipv6-address> |
Remote gateway IPv6 address (from). |
string |
|
diagnose vpn ike log filter vd
Index of virtual domain. -1 matches all.
diagnose vpn ike log filter vd <index>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<index> |
Index of virtual domain. -1 matches all. |
string |
|
diagnose vpn ike log function-name
Enable/disable display function name.
diagnose vpn ike log function-name
diagnose vpn ike log function-name disable
Disable display of function name.
diagnose vpn ike log function-name disable
diagnose vpn ike log function-name enable
Enable display of function name.
diagnose vpn ike log function-name enable
diagnose vpn ike log terminal
IKE debug log terminal statistics.
diagnose vpn ike log terminal
diagnose vpn ike log terminal clear
Clear IKE debug log terminals.
diagnose vpn ike log terminal clear
diagnose vpn ike log terminal reset
Reset IKE debug log terminals.
diagnose vpn ike log terminal reset
diagnose vpn ike log terminal stats
Show IKE debug log terminal statistics.
diagnose vpn ike log terminal stats
diagnose vpn ike manager
IKE manager statistics.
diagnose vpn ike manager
diagnose vpn ike qkd
IKE QKD statistics.
diagnose vpn ike qkd <QKD-name>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<QKD-name> |
IKE QKD server name. |
string |
|
diagnose vpn ike restart
Restart IKE.
diagnose vpn ike restart
diagnose vpn ike routes
IKE routes.
diagnose vpn ike routes
diagnose vpn ike routes list
List IKE routes.
diagnose vpn ike routes list
diagnose vpn ike secrets
IKE secrets statistics.
diagnose vpn ike secrets
diagnose vpn ike stats
IKE statistics.
diagnose vpn ike stats
diagnose vpn ike status
IKE status.
diagnose vpn ike status
diagnose vpn ike status detailed
Detailed status.
diagnose vpn ike status detailed
diagnose vpn ike status summary
Status summary.
diagnose vpn ike status summary
diagnose vpn ike valgrind
Valgrind analysis.
diagnose vpn ike valgrind
diagnose vpn ike valgrind disable
Force daemon to restart.
diagnose vpn ike valgrind disable
diagnose vpn ike valgrind enable
Force daemon to restart.
diagnose vpn ike valgrind enable
diagnose vpn ike valgrind log
Valgrind logs.
diagnose vpn ike valgrind log
diagnose vpn ike valgrind log clear
Clear logs.
diagnose vpn ike valgrind log clear
diagnose vpn ike valgrind log show
Show logs.
diagnose vpn ike valgrind log show
diagnose vpn ike valgrind memcheck
Force daemon to restart.
diagnose vpn ike valgrind memcheck
diagnose vpn ike valgrind memcheck_less
Force daemon to restart.
diagnose vpn ike valgrind memcheck_less
diagnose vpn ike valgrind status
Show valgrind status.
diagnose vpn ike valgrind status