HP 6125XLG Layer 3 - Ip Routing Configuration Manual page 405

algorithm to MD5. Create an IPsec profile named profile001, specify the manual mode for it,
reference IPsec transform set trans, and set the SPIs of the inbound and outbound SAs to 123 and
the keys for the inbound and outbound SAs using ESP to abc.
[SwitchA] ipsec transform-set trans
[SwitchA-ipsec-transform-set-trans] encapsulation-mode transport
[SwitchA-ipsec-transform-set-trans] esp encryption-algorithm 3des-cbc
[SwitchA-ipsec-transform-set-trans] esp authentication-algorithm md5
[SwitchA-ipsec-transform-set-trans] ah authentication-algorithm md5
[SwitchA-ipsec-transform-set-trans] quit
[SwitchA] ipsec profile profile001 manual
[SwitchA-ipsec-profile-profile001-manual] transform-set trans
[SwitchA-ipsec-profile-profile001-manual] sa spi inbound ah 111111111
[SwitchA-ipsec-profile-profile001-manual] sa spi outbound ah 111111111
[SwitchA-ipsec-profile-profile001-manual] sa spi inbound esp 200000
[SwitchA-ipsec-profile-profile001-manual] sa spi outbound esp 200000
[SwitchA-ipsec-profile-profile001-manual] sa string-key inbound ah simple abc
[SwitchA-ipsec-profile-profile001-manual] sa string-key outbound ah simple abc
[SwitchA-ipsec-profile-profile001-manual] sa string-key inbound esp simple 123
[SwitchA-ipsec-profile-profile001-manual] sa string-key outbound esp simple 123
[SwitchA-ipsec-profile-profile001-manual] quit
# On Switch B, create an IPsec transform set named trans, and set the encapsulation mode to
transport mode, the security protocol to ESP, the encryption algorithm to 3DES, and authentication
algorithm to MD5. Create an IPsec profile named profile001, specify the manual mode for it,
reference IPsec transform set trans, and set the SPIs of the inbound and outbound SAs to 123 and
the keys for the inbound and outbound SAs using ESP to abc.
[SwitchB] ipsec transform-set trans
[SwitchB-ipsec-transform-set-trans] encapsulation-mode transport
[SwitchB-ipsec-transform-set-trans] esp encryption-algorithm 3des-cbc
[SwitchB-ipsec-transform-set-trans] esp authentication-algorithm md5
[SwitchB-ipsec-transform-set-trans] ah authentication-algorithm md5
[SwitchB-ipsec-transform-set-trans] quit
[SwitchB] ipsec profile profile001 manual
[SwitchB-ipsec-profile-profile001-manual] transform-set trans
[SwitchB-ipsec-profile-profile001-manual] sa spi inbound ah 111111111
[SwitchB-ipsec-profile-profile001-manual] sa spi outbound ah 111111111
[SwitchB-ipsec-profile-profile001-manual] sa spi inbound esp 200000
[SwitchB-ipsec-profile-profile001-manual] sa spi outbound esp 200000
[SwitchB-ipsec-profile-profile001-manual] sa string-key inbound ah simple abc
[SwitchB-ipsec-profile-profile001-manual] sa string-key outbound ah simple abc
[SwitchB-ipsec-profile-profile001-manual] sa string-key inbound esp simple 123
[SwitchB-ipsec-profile-profile001-manual] sa string-key outbound esp simple 123
[SwitchB-ipsec-profile-profile001-manual] quit
[SwitchB] ipsec profile profile002 manual
[SwitchB-ipsec-profile-profile002-manual] transform-set trans
[SwitchB-ipsec-profile-profile002-manual] sa spi inbound ah 4294967295
[SwitchB-ipsec-profile-profile002-manual] sa spi outbound ah 4294967295
[SwitchB-ipsec-profile-profile002-manual] sa spi inbound esp 256
[SwitchB-ipsec-profile-profile002-manual] sa spi outbound esp 256
[SwitchB-ipsec-profile-profile002-manual] sa string-key inbound ah simple hello
393