26 Network Configuration
IMPORTANT: IP security configurations can be complex: it is possible to unintentionally configure policies
and associations that isolate a switch from all communication. If this happens, you can disable IP security
by placing the switch in maintenance mode, and correct the problem through the serial port interface. For
information about using maintenance mode and connecting through the serial port, see the HP
StorageWorks SN6000 Fibre Channel Switch Installation and Reference Guide.
Displaying IP security information
You can display the security policy and security association databases sorted by the following parameters:
• Active policies and associations; that is, policies and associations currently in use
• Configured policies and associations; that is, policies and associations that have been saved in the
database
• Policies and associations that are being edited, but have not been saved
You can display the following types of IP security configuration information:
• Policy and association information, page 26
• IP security configuration history, page 27
• IP security configuration limits, page 27
Policy and association information
To display general or specific policy and association information, enter the ipsec list command. The
ipsec list command does not require an Admin session or an Ipsec Edit session. However, in an Ipsec
Edit session, the ipsec association list and ipsec policy list commands display the same
information.
The following example displays all active policies and associations:
SN6000 FC Switch #> ipsec list
Active IPsec Information
Security Association Database
-----------------------------
h2h-sh-sa
h2h-hs-sa
Security Policy Database
------------------------
h2h-hs-sp
h2h-sh-sp
Summary
-------
Security Association Count: 2
Security Policy Count: 2
To Next Page
Loading...
Need help?
General