Chapter 27 Configuring Ipsec; In This Chapter - Alcatel-Lucent OmniSwitch 6850-48 Network Configuration Manual

Internet Protocol security (IPsec) is a suite of protocols for securing IPv6 communications by authenticat-
ing and/or encrypting each IP packet in a data stream. IPsec is a framework of open standards designed to
provide interoperable, high quality, cryptographically-based security for IP networks through the use of
appropriate security protocols, cryptographic algorithms, and cryptographic keys. The set of security
services offered includes access control, connectionless integrity, data origin authentication, detection and
rejection of replays (a form of partial sequence integrity), and confidentiality (via encryption).
These security services are provided through use of two security protocols, the Authentication Header
(AH) and the Encapsulating Security Payload (ESP), and through the use of cryptographic key manage-
ment procedures and protocols.
Note. The OmniSwitch currently supports IPsec for IPv6 only.

In This Chapter

This chapter describes the basic components of IPsec and how to configure them through the Command
Line Interface (CLI). CLI commands are used in the configuration examples; for more details about the
syntax of commands, see the OmniSwitch CLI Reference Guide.
Configuration procedures described in this chapter include:
•
Master Key Configuration (see
•
Security Policy Configuration (see
•
Security Policy Rule Configuration (see
•
SA Configuration (see
•
Authentication and Deauthentication Key Configuration (see
page 27-17).
•
Discard Policy Configuration (see
OmniSwitch AOS Release 6 Network Configuration Guide
27 Configuring IPsec
"Configuring an IPsec Master Key" on page
"Configuring an IPsec Policy" on page
"Configuring an IPsec Rule" on page
"Configuring an IPsec SA" on page
"Assigning an Action to a Policy" on page
27-16).
"Configuring IPsec SA Keys" on
September 2009
27-11).
27-12).
27-15).
27-14)
page 27-1