RouterOS Script脚本调用表

对RouterOS研究很长一段时间了，在湖南工业大学的应用中常常要用到脚本进行“精确”控制，要实现那种功能则必须认真学会她的语言——Script脚本，

终于把她的脚本结构图完全弄出来了：

最重要的部分属IP部分，这里先贴出来：

ip accounting

ip accounting edit

ip accounting export file=

ip accounting get

ip accounting print interval= file=

ip accounting set enabled= account-local-traffic= threshold=

ip accounting snapshot

ip accounting snapshot find src-address= dst-address= packets= bytes= src-user= dst-user= from= ip accounting snapshot get

ip accounting snapshot print without-paging count-only append brief value-list terse detail interval= file= from=

ip accounting snapshot take

ip accounting uncounted

ip accounting uncounted print interval= file=

ip accounting uncounted get

ip accounting web-access

ip accounting web-access edit

ip accounting web-access get

ip accounting web-access print interval= file=

ip accounting web-access set accessible-via-web= address=

ip accounting web-access export file=

ip address

ip address add address= network= netmask= broadcast= interface= copy-from= comment= disabled=

ip address comment

ip address disable

ip address edit

ip address enable

ip address export file= from=

ip address find address= network= netmask= broadcast= interface= actual-interface= from= invalid= dynamic= comment= disabled=

ip address get

ip address print without-paging count-only append brief value-list terse detail interval= file= interface= actual-interface= from=

ip address remove

ip address set address= network= netmask= broadcast= interface= comment= disabled=

ip arp

ip arp add address= mac-address= interface= copy-from= comment= disabled=

ip arp comment

ip arp disable

ip arp edit

ip arp enable

ip arp export file= from=

ip arp find address= mac-address= interface= from= invalid= DHCP= dynamic= comment= disabled=

ip arp get

ip arp print without-paging count-only append brief value-list terse detail interval= file= interface= from=

ip arp remove

ip arp set address= mac-address= interface= comment= disabled=

ip dhcp-client

ip dhcp-client add interface= host-name= client-id= add-default-route= use-peer-dns=

use-peer-ntp= copy-from= comment= disabled=

ip dhcp-client comment

ip dhcp-client disable

ip dhcp-client edit

ip dhcp-client enable

ip dhcp-client export file= from=

ip dhcp-client find interface= host-name= client-id= add-default-route= use-peer-dns=

use-peer-ntp= status= address= netmask= gateway= dhcp-server= primary-dns= secondary-dns= primary-ntp= secondary-ntp= expires-after= from= invalid= comment= disabled=

ip dhcp-client get

ip dhcp-client print without-paging count-only append brief value-list terse detail interval= file= interface= status= from=

ip dhcp-client release

ip dhcp-client remove

ip dhcp-client renew

ip dhcp-client set interface= host-name= client-id= add-default-route= use-peer-dns=

use-peer-ntp= comment= disabled=

ip dhcp-relay

ip dhcp-relay add name= interface= dhcp-server= delay-threshold= local-address= copy-from= disabled=

ip dhcp-relay disable

ip dhcp-relay edit

ip dhcp-relay enable

ip dhcp-relay export file= from=

ip dhcp-relay find name= interface= dhcp-server= delay-threshold= local-address= from= invalid= disabled=

ip dhcp-relay monitor once append interval= do= file=

ip dhcp-relay print without-paging count-only append brief value-list terse detail interval= file= interface= from=

ip dhcp-relay remove

ip dhcp-relay reset-counters

ip dhcp-relay set name= interface= dhcp-server= delay-threshold= local-address= disabled=

ip dhcp-server

ip dhcp-server add name= interface= relay= lease-time= address-pool= bootp-support=

delay-threshold= src-address= add-arp= authoritative= always-broadcast= use-radius= copy-from= disabled=

ip dhcp-server alert

ip dhcp-server alert add interface= valid-server= on-alert= alert-timeout= copy-from= comment= disabled=

ip dhcp-server alert comment

ip dhcp-server alert disable

ip dhcp-server alert edit

ip dhcp-server alert enable

ip dhcp-server alert export file= from=

ip dhcp-server alert find interface= valid-server= on-alert= alert-timeout= unknown-server= from= invalid= comment= disabled=

ip dhcp-server alert get

ip dhcp-server alert print without-paging count-only append brief value-list terse detail interval= file= interface= from=

ip dhcp-server alert remove

ip dhcp-server alert reset-alert

ip dhcp-server alert set interface= valid-server= on-alert= alert-timeout= comment= disabled=

ip dhcp-server config

ip dhcp-server config edit

ip dhcp-server config get

ip dhcp-server config print interval= file=

ip dhcp-server config set store-leases-disk=

ip dhcp-server config export file=

ip dhcp-server disable

ip dhcp-server edit

ip dhcp-server enable

ip dhcp-server export file= from=

ip dhcp-server find name= interface= relay= lease-time= address-pool= bootp-support=

delay-threshold= src-address= add-arp= authoritative= always-broadcast= use-radius= from= invalid= disabled=

ip dhcp-server get

ip dhcp-server lease

ip dhcp-server lease add address= mac-address= use-src-mac= client-id= rate-limit= server= block-access= lease-time= always-broadcast= copy-from= comment= disabled=

ip dhcp-server lease check-status

ip dhcp-server lease comment

ip dhcp-server lease disable

ip dhcp-server lease edit

ip dhcp-server lease enable

ip dhcp-server lease export file= from=

ip dhcp-server lease find address= mac-address= use-src-mac= client-id= rate-limit= server= block-access= lease-time= always-broadcast= status= expires-after= active-address=

active-mac-address= active-client-id= active-server= host-name= src-mac-address=

agent-circuit-id= agent-remote-id= from= radius= dynamic= blocked= comment= disabled=

ip dhcp-server lease get

ip dhcp-server lease make-static

ip dhcp-server lease print without-paging count-only append active brief value-list terse detail interval= file= server= status= active-server= from=

ip dhcp-server lease remove

ip dhcp-server lease set address= mac-address= use-src-mac= client-id= rate-limit= server= block-access= lease-time= always-broadcast= comment= disabled=

ip dhcp-server network

ip dhcp-server network add address= gateway= netmask= dns-server= wins-server= ntp-server= domain= next-server= boot-file-name= dhcp-option= copy-from= comment=

ip dhcp-server network comment

ip dhcp-server network edit

ip dhcp-server network export file= from=

ip dhcp-server network find address= gateway= netmask= dns-server= wins-server= ntp-server=

domain= next-server= boot-file-name= dhcp-option= from= comment=

ip dhcp-server network get

ip dhcp-server network print without-paging count-only append brief value-list terse detail interval= file= from=

ip dhcp-server network remove

ip dhcp-server network set address= gateway= netmask= dns-server= wins-server= ntp-server= domain= next-server= boot-file-name= dhcp-option= comment=

ip dhcp-server option

ip dhcp-server option add name= code= value= copy-from=

ip dhcp-server option edit

ip dhcp-server option export file= from=

ip dhcp-server option find name= code= value= from=

ip dhcp-server option get

ip dhcp-server option print without-paging count-only append brief value-list terse detail interval= file= from=

ip dhcp-server option remove

ip dhcp-server option set name= code= value=

ip dhcp-server print without-paging count-only append brief value-list terse detail interval= file= interface= address-pool= bootp-support= authoritative= from=

ip dhcp-server remove

ip dhcp-server set name= interface= relay= lease-time= address-pool= bootp-support=

delay-threshold= src-address= add-arp= authoritative= always-broadcast= use-radius= disabled= ip dhcp-server setup

ip dns

ip dns cache

ip dns cache all

ip dns cache all find name= type= data= ttl= responsible= serial= refresh= retry= expire= minimum= from= static= negative=

ip dns cache all get

ip dns cache all print without-paging count-only append brief value-list terse detail interval= file=

type= from=

ip dns cache find name= address= ttl= from= static=

ip dns cache flush

ip dns cache get

ip dns cache print without-paging count-only append brief value-list terse detail interval= file= from=

ip dns edit

ip dns export file=

ip dns get

ip dns print interval= file=

ip dns set primary-dns= secondary-dns= allow-remote-requests= cache-size= cache-max-ttl= ip dns static

ip dns static add name= address= ttl= copy-from=

ip dns static edit

ip dns static export file= from=

ip dns static find name= address= ttl= from= dynamic=

ip dns static get

ip dns static print without-paging count-only append brief value-list terse detail interval= file= from=

ip dns static remove

ip dns static set name= address= ttl=

ip export file=

ip firewall

ip firewall address-list

ip firewall address-list add list= address= copy-from= comment= disabled=

ip firewall address-list comment

ip firewall address-list disable

ip firewall address-list edit

ip firewall address-list enable

ip firewall address-list export file= from=

ip firewall address-list find list= address= from= dynamic= comment= disabled=

ip firewall address-list get

ip firewall address-list print without-paging count-only append brief value-list terse detail interval= file= list= from=

ip firewall address-list remove

ip firewall address-list set list= address= comment= disabled=

ip firewall connection

ip firewall connection find protocol= src-address= dst-address= reply-src-address=

reply-dst-address= tcp-state= icmp-type= icmp-code= icmp-id= gre-protocol= gre-version=

gre-key= connection-type= timeout= connection-mark= p2p= from= seen reply= assured=

ip firewall connection get

ip firewall connection print without-paging count-only append brief value-list terse detail interval= file= protocol= tcp-state= p2p= from=

ip firewall connection remove

ip firewall connection tracking

ip firewall connection tracking edit

ip firewall connection tracking get

ip firewall connection tracking print interval= file=

ip firewall connection tracking set enabled= tcp-syn-sent-timeout= tcp-syn-received-timeout= tcp-established-timeout= tcp-fin-wait-timeout= tcp-close-wait-timeout= tcp-last-ack-timeout= tcp-time-wait-timeout= tcp-close-timeout= udp-timeout= udp-stream-timeout= icmp-timeout= generic-timeout= tcp-syncookie=

ip firewall connection tracking export file=

ip firewall connection export file=

ip firewall filter

ip firewall filter add chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

src-address-list= dst-address-list= hotspot= action= jump-target= log-prefix= address-list= address-list-timeout= reject-with= copy-from= place-before= comment= disabled=

ip firewall filter comment

ip firewall filter disable

ip firewall filter edit

ip firewall filter enable

ip firewall filter export file= from=

ip firewall filter find chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

src-address-list= dst-address-list= hotspot= action= jump-target= log-prefix= address-list= address-list-timeout= reject-with= bytes= packets= from= invalid= dynamic= comment= disabled=

ip firewall filter get

ip firewall filter move

ip firewall filter print without-paging count-only append stats value-list terse detail interval=

file= chain= action= jump-target= address-list= reject-with= from=

ip firewall filter remove

ip firewall filter reset-counters

ip firewall filter reset-counters-all

ip firewall filter set chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

src-address-list= dst-address-list= hotspot= action= jump-target= log-prefix= address-list= address-list-timeout= reject-with= comment= disabled=

ip firewall filter unset

ip firewall mangle

ip firewall mangle add chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

src-address-list= dst-address-list= hotspot= action= jump-target= log-prefix= address-list= address-list-timeout= new-packet-mark= new-connection-mark= new-routing-mark= new-mss= new-tos= new-ttl= passthrough= copy-from= place-before= comment= disabled=

ip firewall mangle comment

ip firewall mangle disable

ip firewall mangle edit

ip firewall mangle enable

ip firewall mangle export file= from=

ip firewall mangle find chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

ip firewall mangle move

ip firewall mangle print without-paging count-only append stats value-list terse detail interval= file= chain= action= jump-target= address-list= new-packet-mark= new-connection-mark=

new-routing-mark= new-tos= from=

ip firewall mangle remove

ip firewall mangle reset-counters

ip firewall mangle reset-counters-all

ip firewall mangle set chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= tcp-flags= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= p2p= tos= connection-limit= limit= connection-state= dst-limit= time= random= psd= nth= ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port=

ip firewall mangle unset

ip firewall nat

ip firewall nat add chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= tos= connection-limit= limit= dst-limit= time= random= psd= nth=

ipv4-options= src-address-type= dst-address-type= tcp-mss= connection-type= connection-bytes= packet-size= in-bridge-port= out-bridge-port= src-address-list= dst-address-list= hotspot= action= jump-target= log-prefix= address-list= address-list-timeout= to-addresses= to-ports=

same-not-by-dst= copy-from= place-before= comment= disabled=

ip firewall nat comment

ip firewall nat disable

ip firewall nat edit

ip firewall nat enable

ip firewall nat export file= from=

ip firewall nat find chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= tos= connection-limit= limit= dst-limit= time= random= psd= nth=

same-not-by-dst= bytes= packets= from= invalid= dynamic= comment= disabled=

ip firewall nat get

ip firewall nat move

ip firewall nat print without-paging count-only append stats value-list terse detail interval= file= chain= action= jump-target= address-list= from=

ip firewall nat remove

ip firewall nat reset-counters

ip firewall nat reset-counters-all

ip firewall nat set chain= in-interface= out-interface= src-address= dst-address= protocol= fragment= src-port= dst-port= icmp-options= src-mac-address= packet-mark= connection-mark= routing-mark= content= tos= connection-limit= limit= dst-limit= time= random= psd= nth=

same-not-by-dst= comment= disabled=

ip firewall nat unset

ip firewall service-port

ip firewall service-port disable

ip firewall service-port edit

ip firewall service-port enable

ip firewall service-port export file= from=

ip firewall service-port find name= ports= from= invalid= disabled=

ip firewall service-port get

ip firewall service-port print without-paging count-only append brief value-list terse detail interval= file= from=

ip firewall service-port set ports= disabled=

ip firewall export file=

ip hotspot

ip hotspot active

ip hotspot active find server= user= domain= address= mac-address= login-by= uptime= session-time-left= idle-time= idle-timeout= keepalive-timeout= bytes-in= bytes-out= packets-in= packets-out= limit-bytes-in= limit-bytes-out= advertisement= from= radius= blocked=

ip hotspot active get

ip hotspot active print without-paging count-only append brief stats status value-list terse detail oid interval= file= server= advertisement= from=

ip hotspot active remove

ip hotspot add name= interface= address-pool= profile= idle-timeout= keepalive-timeout= addresses-per-mac= copy-from= disabled=

ip hotspot cookie

ip hotspot cookie find user= domain= mac-address= expires-in= from=

ip hotspot cookie get

ip hotspot cookie print without-paging count-only append brief value-list terse detail interval= file= from=

ip hotspot cookie remove

ip hotspot disable

ip hotspot edit

ip hotspot enable

ip hotspot export file= from=

ip hotspot find name= interface= address-pool= profile= idle-timeout= keepalive-timeout= addresses-per-mac= ip-of-dns-name= from= invalid= HTTPS= disabled=

ip hotspot get

ip hotspot host

ip hotspot host find mac-address= address= to-address= server= uptime= idle-time= idle-timeout= keepalive-timeout= host-dead-time= bridge-port= http-proxy= bytes-in= bytes-out= packets-in= packets-out= found-by= from= static= DHCP= dynamic= authorized= bypassed=

ip hotspot host get

ip hotspot host make-binding comment= type=

ip hotspot host print without-paging count-only append brief status bytes packets value-list terse detail interval= file= server= bridge-port= from=

ip hotspot host remove

ip hotspot ip-binding

ip hotspot ip-binding add mac-address= address= to-address= server= type= copy-from=

place-before= comment= disabled=

ip hotspot ip-binding comment

ip hotspot ip-binding disable

ip hotspot ip-binding edit

ip hotspot ip-binding enable

ip hotspot ip-binding export file= from=

ip hotspot ip-binding find mac-address= address= to-address= server= type= from= bypassed= blocked= comment= disabled=

ip hotspot ip-binding get

ip hotspot ip-binding move

ip hotspot ip-binding print without-paging count-only append brief value-list terse detail interval= file= server= type= from=

ip hotspot ip-binding remove

ip hotspot ip-binding set mac-address= address= to-address= server= type= comment= disabled= ip hotspot print without-paging count-only append brief value-list terse detail interval= file= interface= address-pool= profile= addresses-per-mac= from=

ip hotspot profile

ip hotspot profile add name= hotspot-address= dns-name= html-directory= rate-limit= http-proxy= smtp-server= login-by= http-cookie-lifetime= ssl-certificate= split-user-domain= trial-uptime= trial-user-profile= use-radius= radius-accounting= radius-interim-update= nas-port-type=

radius-default-domain= radius-location-id= radius-location-name= copy-from=

ip hotspot profile edit

ip hotspot profile export file= from=

ip hotspot profile find name= hotspot-address= dns-name= html-directory= rate-limit=

http-proxy= smtp-server= login-by= http-cookie-lifetime= ssl-certificate= split-user-domain=

trial-uptime= trial-user-profile= use-radius= radius-accounting= radius-interim-update=

nas-port-type= radius-default-domain= radius-location-id= radius-location-name= from= default= ip hotspot profile get

ip hotspot profile print without-paging count-only append brief value-list terse detail interval=

file= html-directory= ssl-certificate= trial-user-profile= nas-port-type= from=

ip hotspot profile remove

ip hotspot profile set name= hotspot-address= dns-name= html-directory= rate-limit=

http-proxy= smtp-server= login-by= http-cookie-lifetime= ssl-certificate= split-user-domain= trial-uptime= trial-user-profile= use-radius= radius-accounting= radius-interim-update=

nas-port-type= radius-default-domain= radius-location-id= radius-location-name=

ip hotspot remove

ip hotspot reset-html

ip hotspot service-port

ip hotspot service-port disable

ip hotspot service-port edit

ip hotspot service-port enable

ip hotspot service-port export file= from=

ip hotspot service-port find name= ports= from= disabled=

ip hotspot service-port get

ip hotspot service-port print without-paging count-only append brief value-list terse detail interval= file= from=

ip hotspot service-port set ports= disabled=

ip hotspot set name= interface= address-pool= profile= idle-timeout= keepalive-timeout= addresses-per-mac= disabled=

ip hotspot setup

ip hotspot user

ip hotspot user add server= name= password= address= mac-address= profile= routes= email= limit-uptime= limit-bytes-in= limit-bytes-out= copy-from= comment= disabled=

ip hotspot user comment

ip hotspot user disable

ip hotspot user edit

ip hotspot user enable

ip hotspot user export file= from=

ip hotspot user find server= name= password= address= mac-address= profile= routes= email= limit-uptime= limit-bytes-in= limit-bytes-out= uptime= bytes-in= bytes-out= packets-in=

packets-out= from= dynamic= comment= disabled=

ip hotspot user get

ip hotspot user print without-paging count-only append brief bytes packets value-list terse detail interval= file= server= profile= from=

ip hotspot user profile

ip hotspot user profile add name= address-pool= session-timeout= idle-timeout=

keepalive-timeout= status-autorefresh= shared-users= rate-limit= incoming-filter=

outgoing-filter= incoming-packet-mark= outgoing-packet-mark= on-login= on-logout= transparent-proxy= open-status-page= advertise= advertise-url= advertise-interval=

advertise-timeout= copy-from=

ip hotspot user profile edit

ip hotspot user profile export file= from=

ip hotspot user profile find name= address-pool= session-timeout= idle-timeout=

keepalive-timeout= status-autorefresh= shared-users= rate-limit= incoming-filter=

outgoing-filter= incoming-packet-mark= outgoing-packet-mark= on-login= on-logout= transparent-proxy= open-status-page= advertise= advertise-url= advertise-interval=

advertise-timeout= from= default=

ip hotspot user profile get

ip hotspot user profile print without-paging count-only append brief value-list terse detail interval= file= address-pool= shared-users= from=

ip hotspot user profile remove

ip hotspot user profile set name= address-pool= session-timeout= idle-timeout=

keepalive-timeout= status-autorefresh= shared-users= rate-limit= incoming-filter=

outgoing-filter= incoming-packet-mark= outgoing-packet-mark= on-login= on-logout= transparent-proxy= open-status-page= advertise= advertise-url= advertise-interval=

advertise-timeout=

ip hotspot user profile unset

ip hotspot user remove

ip hotspot user reset-counters

ip hotspot user set server= name= password= address= mac-address= profile= routes= email=

limit-uptime= limit-bytes-in= limit-bytes-out= comment= disabled=

ip hotspot walled-garden

ip hotspot walled-garden add server= src-address= method= dst-host= dst-port= path= action= copy-from= place-before= comment= disabled=

ip hotspot walled-garden comment

ip hotspot walled-garden disable

ip hotspot walled-garden edit

ip hotspot walled-garden enable

ip hotspot walled-garden export file= from=

ip hotspot walled-garden find server= src-address= dst-address= method= dst-host= dst-port= path= action= from= dynamic= comment= disabled=

ip hotspot walled-garden get

ip hotspot walled-garden ip

ip hotspot walled-garden ip add server= src-address= dst-address= dst-host= protocol= dst-port= action= copy-from= place-before= comment= disabled=

ip hotspot walled-garden ip comment

ip hotspot walled-garden ip disable

ip hotspot walled-garden ip edit

ip hotspot walled-garden ip enable

ip hotspot walled-garden ip export file= from=

ip hotspot walled-garden ip find server= src-address= dst-address= dst-host= protocol= dst-port= action= from= invalid= comment= disabled=

ip hotspot walled-garden ip get

ip hotspot walled-garden ip move

ip hotspot walled-garden ip print without-paging count-only append brief value-list terse detail interval= file= action= from=

ip hotspot walled-garden ip remove

ip hotspot walled-garden ip set server= src-address= dst-address= dst-host= protocol= dst-port= action= comment= disabled=

ip hotspot walled-garden ip unset

ip hotspot walled-garden move

ip hotspot walled-garden print without-paging count-only append brief value-list terse detail interval= file= from=

ip hotspot walled-garden remove

ip hotspot walled-garden set server= src-address= method= dst-host= dst-port= path= action= comment= disabled=

ip hotspot walled-garden unset

ip ipsec

ip ipsec counters

ip ipsec counters reset-counters

ip ipsec counters print interval= file=

ip ipsec counters get

ip ipsec installed-sa

ip ipsec installed-sa find spi= direction= src-address= dst-address= auth-algorithm=

enc-algorithm= replay= state= auth-key= enc-key= add-lifetime= use-lifetime= lifebytes= current-addtime= current-usetime= current-bytes= from= AH= ESP= pfs= manual=

ip ipsec installed-sa flush sa-type=

ip ipsec installed-sa get

ip ipsec installed-sa print without-paging count-only append brief value-list terse detail interval= file= direction= auth-algorithm= enc-algorithm= state= from=

ip ipsec manual-sa

ip ipsec manual-sa add name= ah-algorithm= esp-auth-algorithm= esp-enc-algorithm= ah-key= esp-auth-key= esp-enc-key= ah-spi= esp-spi= copy-from= disabled=

ip ipsec manual-sa disable

ip ipsec manual-sa edit

ip ipsec manual-sa enable

ip ipsec manual-sa export file= from=

ip ipsec manual-sa find name= ah-algorithm= esp-auth-algorithm= esp-enc-algorithm= ah-key= esp-auth-key= esp-enc-key= ah-spi= esp-spi= from= invalid= disabled=

ip ipsec manual-sa get

ip ipsec manual-sa print without-paging count-only append brief value-list terse detail interval= file= from=

ip ipsec manual-sa remove

ip ipsec manual-sa set name= ah-algorithm= esp-auth-algorithm= esp-enc-algorithm= ah-key= esp-auth-key= esp-enc-key= ah-spi= esp-spi= disabled=

ip ipsec peer

ip ipsec peer add address= secret= generate-policy= exchange-mode= send-initial-contact= proposal-check= hash-algorithm= enc-algorithm= dh-group= lifetime= lifebytes= copy-from= disabled=

ip ipsec peer disable

ip ipsec peer edit

ip ipsec peer enable

ip ipsec peer export file= from=

ip ipsec peer find address= secret= generate-policy= exchange-mode= send-initial-contact= proposal-check= hash-algorithm= enc-algorithm= dh-group= lifetime= lifebytes= ph1-state=

ph1-side= ph1-established= ph2-active= ph2-total= from= disabled=

ip ipsec peer get

ip ipsec peer print without-paging count-only append brief value-list terse detail interval= file= exchange-mode= proposal-check= hash-algorithm= enc-algorithm= dh-group= ph1-state=

ph1-side= from=

ip ipsec peer remove

ip ipsec peer set address= secret= generate-policy= exchange-mode= send-initial-contact= proposal-check= hash-algorithm= enc-algorithm= dh-group= lifetime= lifebytes= disabled=

ip ipsec policy

ip ipsec policy add src-address= dst-address= protocol= action= level= ipsec-protocols= tunnel= sa-src-address= sa-dst-address= proposal= manual-sa= dont-fragment= copy-from= place-before= disabled=

ip ipsec policy disable

ip ipsec policy edit

ip ipsec policy enable

ip ipsec policy export file= from=

ip ipsec policy find src-address= dst-address= protocol= action= level= ipsec-protocols= tunnel= sa-src-address= sa-dst-address= proposal= manual-sa= dont-fragment= ph2-state= in-accepted= in-dropped= out-accepted= out-dropped= encrypted= not-encrypted= decrypted= not-decrypted= from= dynamic= invalid= disabled=

ip ipsec policy get

ip ipsec policy move

ip ipsec policy print without-paging count-only append brief stats value-list terse detail interval= file= protocol= action= level= proposal= manual-sa= dont-fragment= ph2-state= from=

ip ipsec policy remove

ip ipsec policy set src-address= dst-address= protocol= action= level= ipsec-protocols= tunnel= sa-src-address= sa-dst-address= proposal= manual-sa= dont-fragment= disabled=

ip ipsec proposal

ip ipsec proposal add name= auth-algorithms= enc-algorithms= lifetime= lifebytes= pfs-group= copy-from= disabled=

ip ipsec proposal disable

ip ipsec proposal edit

ip ipsec proposal enable

ip ipsec proposal export file= from=

ip ipsec proposal find name= auth-algorithms= enc-algorithms= lifetime= lifebytes= pfs-group= from= disabled=

ip ipsec proposal get

ip ipsec proposal print without-paging count-only append brief value-list terse detail interval= file= pfs-group= from=

ip ipsec proposal remove

ip ipsec proposal set name= auth-algorithms= enc-algorithms= lifetime= lifebytes= pfs-group= disabled=

ip ipsec remote-peers

ip ipsec remote-peers find local-address= remote-address= state= side= established= ph2-active= ph2-total= from=