HP VSR1000 Security Configuration Manual page 192

Step
3. (Optional.) Configure a
description for the IPsec
policy.
4. Specify an ACL for the
IPsec policy.
5. Specify an IPsec
transform set for the IPsec
policy.
6. Specify the remote IP
address of the IPsec
tunnel.
7. Configure an SPI for the
inbound or outbound
IPsec SA.
Command
description text
security acl [ ipv6 ] { acl-number |
name acl-name }
transform-set transform-set-name
remote-address { ipv4-address |
ipv6 ipv6-address }
•
To configure an SPI for the
inbound IPsec SA:
sa spi inbound { ah | esp }
spi-number
•
To configure an SPI for the
outbound IPsec SA:
sa spi outbound { ah | esp }
spi-number
182
Remarks
By default, no description is configured.
By default, an IPsec policy references no
ACL.
An IPsec policy can reference only one
ACL.
By default, an IPsec policy references no
IPsec transform set.
A manual IPsec policy can reference only
one IPsec transform set.
By default, the remote IP address of the
IPsec tunnel is not specified.
The local IPv4 address of the IPsec tunnel
is the primary IP address of the interface
to which the IPsec policy is applied. The
local IPv6 address of the IPsec tunnel is
the first IPv6 address of the interface to
which the IPsec policy is applied.
By default, no SPI is configured for the
inbound or outbound IPsec SA.