Applying An Ipsec Profile; Displaying And Maintaining Ripng - HP 5500 EI series Configuration Manual

Hide thumbs Also See for 5500 EI series:
Table of Contents

Advertisement

Applying an IPsec profile

To protect routing information and prevent attacks, RIPng supports using an IPsec profile to authenticate
protocol packets. For more information about IPsec profiles, see Security Configuration Guide.
Outbound RIPng packets carry the Security Parameter Index (SPI) defined in the relevant IPsec profile. A
device uses the SPI carried in a received packet to match against the configured IPsec profile. If they
match, the device accepts the packet. If they do not match, the device discards the packet and does not
establish a neighbor relationship with the sending device.
You can configure an IPsec profile for a RIPng process or interface. The IPsec profile configured for a
process applies to all packets in the process. The IPsec profile configured for an interface applies to
packets on the interface. If an interface and its process each have an IPsec profile configured, the
interface uses its own IPsec profile.
To apply an IPsec profile to a process:
Step
1.
Enter system view.
2.
Enter RIPng view.
3.
Apply an IPsec profile to the
process.
To apply an IPsec profile to an interface:
Step
1.
Enter system view.
2.
Enter interface view.
3.
Apply an IPsec profile to the
interface.

Displaying and maintaining RIPng

Execute display commands in any view and reset commands in user view.
Task
Display configuration information of a RIPng
process.
Display routes in the RIPng database.
Display the routing information of a specified
RIPng process.
Display RIPng interface information.
Command
system-view
ripng [ process-id ] [ vpn-instance
vpn-instance-name ]
enable ipsec-profile profile-name
Command
system-view
interface interface-type
interface-number
ripng ipsec-profile profile-name
Command
display ripng [ process-id ]
display ripng process-id database [ ipv6-address prefix-length ]
display ripng process-id route [ ipv6-address prefix-length
[ verbose ] | peer ipv6-address | statistics ]
display ripng process-id interface [ interface-type
interface-number ]
329
Remarks
N/A
N/A
By default, no IPsec profile is
applied.
Remarks
N/A
N/A
By default, no IPsec profile is
applied.

Advertisement

Table of Contents
loading

This manual is also suitable for:

5500 si series

Table of Contents