Global Configuration Mode

Global Configuration Commands

no host-filter

Use the no host-filtercommand to remove a IP host name filter entry. To add a IP host name, see host-filtercommand on page 4-19.

Syntax: (config)# no host-filter name

Field

name

Definition

Name of an existing IP host name to remove.

Example: (config)# no host-filter HostFilter1

Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR

no ipsec authentication-retries

Use the no ipsec authentication-retriescommand to disable the block-ip feature. To enable block-ip, see the ipsec authentication-retriescommand on page 4-21.

Syntax: (config)# no ipsec authentication-retries

Example: (config)# no ipsec authentication-retries

Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR

no ipsec log ike

Use the no ipsec log ike command to disable Internet Key Exchange (IKE) related logs. To enable IKE logging, see ipsec log ike command on page 4-22

Syntax: (config)# no ipsec log ike {auto-keyike-intike-msgmsg-byte msg-enc-decmsg_inpmsg-outppri-keyrej-packet}

Field

Definition

auto-key

Enable verbose automatic keying.

 

 

ike-int

Enable verbose IKE IPSec interaction.

 

 

ike-msg

Print all IKE message ignoring rate limit.

 

 

msg-byte

Enable message’s raw byte option.

 

 

msg-enc-dec

Enable message’s encryption and decryption.

 

 

msg_inp

Enable message’s input structure.

 

 

msg-outp

Enable message’s output structure.

 

 

pri-key

Enable verbose private key.

 

 

rej-packet

Enable verbose IKE reject packets.

 

 

Example: (config)# no ipsec log ike msg-outp

Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR

4-40

Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) CLI

Page 166
Image 166
Carrier Access none manual No host-filter, No ipsec authentication-retries, No ipsec log ike