3Com 3032 Configuration Manual page 575

Perform the following configurations in IPSec policy view.
1 Set SPI parameters for the security policy association
Table 643 Configure SPI Parameters of Security Policy Association
Operation
Set SPI parameters of inbound SA of
AH/ESP protocol (applicable to IPSec
software and crypto card)
Delete SPI parameters of inbound SA of
AH/ESP protocol (applicable to IPSec
software and crypto card)
Set SPI parameters of outbound SA of
AH/ESP protocol (applicable to IPSec
software and crypto card)
Delete SPI parameters of outbound SA of
AH/ESP protocol (applicable to IPSec
software and crypto card)
By default, no SPI value of inbound/outbound SA is set.
2 Set the key used by the security policy association
Table 644 Configure Key Used by Security Policy Association
Operation
Set authentication key of AH protocol
(input in hexadecimal mode) (applicable to
IPSec software and crypto card)
Delete authentication key of AH protocol
(in hexadecimal mode) (applicable to IPSec
software and crypto card)
Set authentication key of AH protocol
(input in string mode) (applicable to IPSec
software and crypto card)
Delete authentication key of AH protocol
(character string) (applicable to IPSec
software and crypto card)
Configure authentication key of ESP
protocol (input in hexadecimal system)
(applicable to IPSec software and crypto
card)
Delete authentication key of ESP protocol
(applicable to IPSec software and crypto
card)
Set ciphering key of ESP protocol (input in
hexadecimal system) (applicable to IPSec
software and crypto card)
Delete ciphering key of ESP protocol
(applicable to IPSec software and crypto
card)
Configure both ciphering and
authentication keys of ESP protocol (input
in string) (applicable to IPSec software and
crypto card)
Delete the ciphering and authentication
keys of ESP protocol (applicable to IPSec
software and crypto card)
By default, no key is used by any security policy.
Creating a Security Policy
Command
sa inbound {ah |esp} spi spi-number
undo sa inbound {ah |esp} spi
sa outbound {ah |esp} spi spi-number
undo sa outbound {ah |esp} spi
Command
sa { inbound | outbound } ah
hex-key-string hex-key
undo sa { inbound | outbound } ah
hex-key-string
sa { inbound | outbound } { ah
string-key string-key
undo sa { inbound | outbound } ah
string-key
sa { inbound | outbound } esp
authentication-hex
undo sa { inbound | outbound } esp
authentication-hex
sa { inbound | outbound } esp
encryption-hex hex-key
undo sa { inbound | outbound } esp
encryption-hex
sa { inbound | outbound } esp
string-key string-key
undo sa { inbound | outbound } esp
string-key
571
hex-key