HPE FlexNetwork 7500 Series Command Reference Manual page 220

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the target host
belongs to. The vpn-instance-name argument represents the VPN instance name, a case-sensitive
string of 1 to 31 characters. If the target host belongs to the public network, do not specify this option.
cipher: Specifies an authentication key and an encryption key in encrypted form. The keys will be
converted to a digest in encrypted form and stored in the device.
simple: Specifies an authentication key and an encryption key in plaintext from. The keys will be
converted to a digest in encrypted form and stored in the device.
authentication-mode: Specifies an authentication algorithm. If you do not specify the keyword, the
system does not perform authentication. For more information about authentication algorithms, see
IPSec configuration in Security Configuration Guide.
•
md5: Specifies the HMAC-MD5 authentication algorithm.
•
sha: Specifies the HMAC-SHA1 authentication algorithm.
auth-password: Specifies an authentication key. This argument is case sensitive.
•
The plaintext form of the key in non-FIPS mode is a string of 1 to 64 characters. The plaintext
form of the key in FIPS mode is a string of 15 to 64 characters, which must contain numbers,
uppercase letters, lowercase letters, and special characters.
•
The encrypted form of the key can be calculated by using the snmp-agent
calculate-password command.
privacy-mode: Specifies an encryption algorithm. If you do not specify this keyword, the system
does not perform encryption.
•
3des: Specifies the 3DES encryption algorithm that uses a 168-bit key.
•
aes128: Specifies the AES encryption algorithm that uses a 128-bit key.
•
aes192: Specifies the AES encryption algorithm that uses a 192-bit key.
•
aes256: Specifies the AES encryption algorithm that uses a 256-bit key.
•
des56: Specifies the DES encryption algorithm that uses a 56-bit key.
priv-password: Specifies an encryption key. This argument is case sensitive.
•
The plaintext form of the key in non-FIPS mode is a string of 1 to 64 characters. The plaintext
form of the key in FIPS mode is a string of 15 to 64 characters, which must contain numbers,
uppercase letters, lowercase letters, and special characters.
•
The encrypted form of the key can be calculated by using the snmp-agent
calculate-password command.
acl: Specifies a basic or advanced IPv4 ACL for the user.
ipv4-acl-number: Specifies a basic or advanced IPv4 ACL by its number. The basic IPv4 ACL
number is in the range of 2000 to 2999. The advanced IPv4 ACL number is in the range of 3000 to
3999.
name ipv4-acl-name: Specifies a basic or advanced IPv4 ACL by its name, a case-insensitive string
of 1 to 63 characters.
acl ipv6: Specifies a basic or advanced IPv6 ACL for the user.
ipv6-acl-number: Specifies a basic or advanced IPv6 ACL by its number. The basic IPv6 ACL
number is in the range of 2000 to 2999. The advanced IPv6 ACL number is in the range of 3000 to
3999.
name ipv6-acl-name: Specifies a basic or advanced IPv6 ACL by its name, a case-insensitive string
of 1 to 63 characters.
local: Specifies the local SNMP engine. By default, an SNMPv3 user is associated with the local
SNMP engine.
engineid engineid-string: Specifies an SNMP engine ID. The engineid-string argument is an even
number of hexadecimal characters. All-zero and all-F strings are invalid. The even number is in the
210