Alcatel-Lucent 7750 SR Manual page 1426

VPRN Service Configuration Commands
Parameters ip-address — IP address of the local end of the tunnel.
delivery-service service-id — The ID of the IES or VPRN (front-door) delivery service of this
manual-keying
Syntax [no] manual-keying
Context config>service>vprn>ipsec-interface>sap>tunnel
Description
This command configures Security Association (SA) for manual keying. When enabled, the
command specifies whether this SA entry is created manually by the user or dynamically by the IPsec
sub-system.
Default none
security-association
Syntax security-association security-entry-id authentication-key authentication-key encryption-
key encryption-key spi spi transform transform-id direction {inbound | outbound}
no security-association security-entry-id direction {inbound | outbound}
Context config>service>vprn>ipsec-interface>sap>tunnel>manual-keying
Description
This command configures the information required for manual keying SA creation.
Default none
Parameters
security-entry-id — Specifies the ID of an SA entry.
encryption-key encryption-key — specifies the key used for the encryption algorithm.
authentication-key authentication-key —
spi spi — Specifies the SPI (Security Parameter Index) used to look up the instruction to verify and
transform transform-id — specifies the transform entry that will be used by this SA entry. This
Page 1426
tunnel. Use this service-id to find the VPRN used for delivery.
Values
service-id: 1 — 2147483648
svc-name: Specifies an existing service name up to 64 characters in length.
Values 1 — 16
Values
none or 0x0..0xFFFFFFFF...(max 64 hex nibbles)
Values none or 0x0..0xFFFFFFFF...(max 40 hex nibbles)
decrypt the incoming IPSec packets when the direction is inbound. When the direction is
outbound, the SPI that will be used in the encoding of the outgoing packets. The remote node can
use this SPI to lookup the instruction to verify and decrypt the packet.
Values 256 — 16383
object should be specified for all the entries created which are manual SAs. If the value is
dynamic, then this value is irrelevant and will be zero.
7750 SR OS Services Guide