Ipv6 Ospf Encryption Spi Esp - Allied Telesis AT-AR3050S Command Reference Manual

Next-generation firewall
Hide thumbs Also See for AT-AR3050S:
Table of Contents

Advertisement

OSPF
3
IP
6 C
V
FOR
V
OMMANDS
6
IPV
OSPF ENCRYPTION SPI ESP

ipv6 ospf encryption spi esp

Overview
Use this command in Interface Configuration mode to enable either AES-CBC
(Advanced Encryption Standard-Cipher Block Chaining) or 3DES (Triple Data
Encryption Standard) ESP (Encapsulating Security Payload) encryption for a
specified interface.
Use the no variant of this command in Interface Configuration mode to disable the
encryption configured for a specified interface.
ipv6 ospf encryption ipsec spi <256-4294967295> esp {aes-cbc
Syntax
<AES-CBC-key>|3des <3DES-key>|null}{md5 <MD5-key>|sha1
<SHA1-key>}
ipv6 ospf encryption null
no ipv6 ospf encryption ipsec spi <256-4294967295>
Default
Authentication is not configured on an interface by default.
Mode
Interface Configuration
Usage
When you issue this command, authentication and encryption are both enabled.
Configure the same SPI (Security Parameters Index) value on all interfaces that
connect to the same link. SPI values are used by link interfaces. Use a different SPI
value for a different link interface when using OSPFv3 with link interfaces.
C613-50077-01 REV A
Parameter
Description
<256-
Specify an SPI (Security Parameters Index) value in the range 256 to
4294967295>
4294967295, entered as a decimal integer.
esp
Specify the esp keyword (Encapsulating Security Payload) to then
apply either AES-CBC or 3DES encryption.
aes-cbc
Specify this keyword to enable AES-CBC (Advanced Encryption
Standard-Cipher Block Chaining) encryption.
<AES-CBC-
Enter an AES-CBC key containing either 32, 48, or 64 hexadecimal
key>
characters.
3des
Specify 3DES (Triple Data Encryption Standard) encryption.
<3DES-key>
Enter a 3DES key containing 48 hexadecimal characters.
null
Specify ESP without AES-CBC or 3DES encryption applied.
md5
Specify the MD5 (Message-Digest 5) encryption algorithm.
<MD5-key>
Enter an MD5 key containing 32 hexadecimal characters.
sha1
Specify the SHA-1 (Secure Hash Algorithm 1) encryption algorithm.
<SHA1-key>
Enter an SHA-1 key containing 40 hexadecimal characters.
null
Specify no encryption is applied when no other parameters are
applied after this keyword (ipv6 ospf encryption null).
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
880

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents