How to check whether configured PFS Algorithms are consistent ?

26

Run the display ipsec policy command to check whether PFS algorithm parameters configured on both ends are consistent. If inconsistent, configure the PFS algorithm in the IPSec Proposal view.

Other related questions:
How to check whether IKE proposal parameters configured on both ends are consistent ?
Run the display ike proposal command to check whether IKE Proposal parameters configured on both ends are consistent. Check whether the algorithms of the IKE Proposal configured on both ends are consistent. If inconsistent, modify the algorithms in the IKE Proposal view.

How to check whether IPSec proposal parameters configured on both ends are consistent
Run the display ipsec proposal command to check whether IPSec Proposal parameters configured on both ends are consistent. If inconsistent, modify the related algorithms in the IPSec Proposal view.

How to check whether mirroring is configured successfully on S series switches
For S series switches, you can use either of the following methods to check whether mirroring is configured successfully: - Run the display interface brief command to check whether the observing port usage is increased. - Check whether the monitoring and packet capture software (such as Wireshark) on the monitoring device directly connected to observing ports have successfully capture packets.

How to check whether the NAT Server is correctly configured ?
Check whether the NAT server for port 80 or port 8080 of the internal server is correctly configured on the firewall. In CLI mode, run the display nat server command to view the NAT server configuration. Check whether the global address, inside address, port address, security zone, and protocol type of the NAT server are correct.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top