VPN
Issue 1 January 2008
1205
clear crypto sa counters
Use the
clear crypto sa counters
command to clear the crypto SA counters.
Syntax
clear crypto sa counters
User Level
read-write
Context
general
Example
To clear crypto SA counters:
G450-001(super)# clear crypto sa counters
Related Commands
show crypto ipsec transform-set
crypto ipsec df-bit
Use the
crypto ipsec df-bit
command to set the Don’t-Fragment bit to one of the
following modes:
●
clear
— the DF bit of the encapsulated packet is never set, and PMTUD is not
maintained for the IPSec tunnel. Packets traversing an IPSec tunnel are pre-fragmented
according to the MTU of the SA, regardless of their DF bit. In case packets are
fragmented, the DF bit is copied to every fragment of the original packet.
●
copy
— the DF bit of the encapsulated packet is copied from the original packet, and Path
MTU Discovery (PMTUD) is maintained for the IPSec tunnel.
Use the
no
form of the command to restore the Don’t-Fragment bit to the default value:
copy
.
Syntax
[no] crypto ipsec df-bit {clear | copy}
Summary of Contents for G450 Manager
Page 1: ...Avaya G450 CLI Reference 03 602056 Issue 1 January 2008 ...
Page 32: ...Contents 32 Avaya G450 CLI Reference ...
Page 38: ...About this Book 38 Avaya G450 CLI Reference ...
Page 154: ...Roadmap 154 Avaya G450 CLI Reference ...
Page 1304: ...CLI Commands WFVQ Weighted Fair VoIP Queueing 1304 Avaya G450 CLI Reference ...
