Configuring Ospfv3 Ipsec - Huawei Quidway NetEngine80E Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing

6.12 Configuring OSPFv3 IPSec

OSPFv3 IPSec provides a complete set of IPSec mechanisms to authenticate sent and received
OSPFv3 packets, protecting devices against forged OSPFv3 packets.
6.12.1 Before You Start
Before configuring OSPFv3 IPSec, familiarize yourself with the usage scenario, complete the
pre-configuration tasks, and obtain the data required for the configuration.
Applicable Environment
OSPFv3 IPSec uses a complete set of IPSec mechanisms to authenticate sent and received
OSPFv3 packets, protecting devices against pseudo OSPFv3 packets.
Pre-configuration Tasks
Before configuring OSPFv3 IPSec, complete the following tasks:
l
l
Data Preparation
To configure OSPFv3 IPSec, you need the following data.
No.
1
2
3
4
5
6
7
8
9
Issue 02 (2014-09-30)
Configuring an IPSec Proposal
NOTE
OSPFv3 IPSec only support transport packet encapsulation mode.
Configuring Basic OSPFv3 Functions
Data
Security protocol
Authentication algorithms used by AH
Authentication algorithm used by ESP
Encapsulation algorithm used by ESP
AH security parameter indexes used for protecting incoming and outgoing traffic
ESP security parameter indexes used for protecting incoming and outgoing traffic
AH authentication key (in the format of a string) used for protecting incoming and
outgoing traffic
ESP authentication key (in the format of a string) used for protecting incoming and
outgoing traffic
AH authentication key (in the hexadecimal format) used for protecting incoming and
outgoing traffic
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
453