User's Guide Command Line Interface - QLogic

3–Network Configuration
Managing IP Security
Managing IP Security
To modify IP Security, you must open an Admin session with the Admin Start
command. An Admin session prevents other accounts from making changes at
the same time through Telnet, QuickTools, Enterprise Fabric Suite, or another
management application. You must also open an Ipsec Edit session with the Ipsec
Edit command. The Ipsec Edit session provides access to the Ipsec,
Ipsec Association, Ipsec Policy, Ike Peer, and Ike Policy commands with which
you make modifications to the IP security and Internet key exchange (IKE)
configurations.
SANbox #> admin start
SANbox (admin) #> ipsec edit
SANbox (admin-ipsec)#> ipsec . . .
SANbox (admin-ipsec)#> ipsec policy . . .
SANbox (admin-ipsec)#> ipsec association. . .
SANbox (admin-ipsec)#> ike peer . . .
SANbox (admin-ipsec)#> ike policy . . .
When you are finished making changes, enter the Ipsec Save command to save
and activate the changes and close the Ipsec Edit session. Changes take effect
immediately.
SANbox (admin-ipsec)#> ipsec save
To close the Ipsec Edit session without saving changes, enter the Ipsec Cancel
command.
SANbox (admin-ipsec)#> ipsec cancel
The Admin End command releases the Admin session for other administrators
when you are done making changes to the switch.
To remove all IP security policies, security associations, IKE peers, and IKE
policies, enter the Reset Ipsec command.
SANbox (admin) #> reset ipsec
3-6 59263-02 B