HP A6600 Configuration Manual page 266

You do not need to configure ACLs or IPsec tunnel addresses.
•
Within a certain routed network scope, the IPsec proposals used by the IPsec policies on all routers
•
must have the same security protocols, security algorithms, and encapsulation mode. For OSPFv3,
the scope can be directly connected neighbors or an OSPFv3 area. For RIPng, the scope can be
directly connected neighbors or a RIPng process. For IPv6 BGP, the scope can be directly
connected neighbors or a neighbor group.
All SAs (both inbound and outbound) within the routed network scope must use the same SPI and
•
keys.
Configure the keys on all routers within the routed network scope in the same format. For example,
•
if you enter the keys in hexadecimal format on one router, do so across the routed network scope.
254