Dell Force10 Z9000 Configuration Manual page 666

If you have enabled IPsec authentication in an OSPFv3 area with the
cannot use the
The configuration of IPsec encryption on an interface-level takes precedence over an area-level
configuration. If you remove an interface configuration, an area encryption policy that has been configured
is applied to the interface.
To remove an IPsec encryption policy from an OSPFv3 area, enter the
command.
number
To display the configuration of IPsec encryption policies on the router, enter the
command.
Displaying OSPFv3 IPsec Security Policies
To display the configuration of IPsec authentication and encryption policies, enter the following command:
Command Syntax
show crypto ipsec
policy [ name name]
| Open Shortest Path First (OSPFv2 and OSPFv3)
666
command in the area at the same time.
area encryption
Command Mode Usage
EXEC Privilege Display the AH and ESP parameters configured in IPsec
security policies, including the SPI number, key, and
algorithms used.
name
displays configuration details about a specified policy.
command, you
area authentication
no area area-id encryption ipsec spi
show crypto ipsec policy