HP ProCurve 7102dl Reference Manual page 1247

SROS Command Line Interface Reference Guide
set session-key [inbound | outbound]
Use the set session-key command to define the encryption and authentication keys for this crypto map.
Variations of this command include the following:
set session-key inbound ah <SPI> <keyvalue>
set session-key inbound esp <SPI> authenticator <keyvalue>
set session-key inbound esp <SPI> cipher <keyvalue>
set session-key inbound esp <SPI> cipher <keyvalue> authenticator <keyvalue>
set session-key outbound ah <SPI> <keyvalue>
set session-key outbound esp <SPI> authenticator <keyvalue>
set session-key outbound esp <SPI> cipher <keyvalue>
set session-key outbound esp <SPI> cipher <keyvalue> authenticator <keyvalue>
Syntax Description
inbound
outbound
ah <SPI>
esp <SPI>
cipher <keyvalue>
authenticator <keyvalue>
Default Values
There are no default settings for this command.
Functional Notes
The inbound local security parameter index (SPI) must equal the outbound remote SPI. The outbound
local SPI must equal the inbound remote SPI. The key values are the hexadecimal representations of the
keys. They are not true ASCII strings. Therefore, a key of 3031323334353637 represents "01234567".
See the following table for key length requirements.
Algorithm
DES
3DES
AES-128-CBC
AES-192-CBC
AES-256-CBC
MD5
SHA1
5991-2114
Defines encryption keys for inbound traffic.
Defines encryption keys for outbound traffic.
Specifies authentication header protocol.
Specifies encapsulating security payload protocol.
Specifies encryption/decryption key.
Specifies authentication key.
64-bits in length; 8 hexadecimal bytes
192-bits in length; 24 hexadecimal bytes
128-bits in length; 16 hexadecimal bytes
192-bits in length; 24 hexadecimal bytes
256-bits in length; 32 hexadecimal bytes
128-bits in length; 16 hexadecimal bytes
160-bits in length; 20 hexadecimal bytes
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Crypto Map Manual Command Set
Minimum key length required
1245