Enabling Ipsec On The Sham Link - Huawei Quidway NetEngine80E Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
area area-id
The OSPFv3 area view is displayed.
Step 4 Run:
vlink-peer router-id ipsec sa sa-name
An SA is configured to authenticate the packets sent and received on the Virtual Link.
----End

6.12.6 Enabling IPSec on the Sham Link

An SA configured on a sham link is used to authenticate the packets sent and received on the
sham link.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ospfv3 [ process-id ] vpn-instance [ vpn-instance-name ]
The OSPFv3 view is displayed.
Step 3 Run:
area area-id
The OSPFv3 area view is displayed.
Step 4 Run:
sham-link source-address destination-address ipsec sa sa-name
An SA is configured on the sham link.
----End
6.12.7 Checking the Configurations
After configuring OSPFv3 IPSec, you can view the information about SAs configured in an
OSPFv3 process, OSPFv3 area, OSPFv3 interface, OSPFv3 virtual link, and OSPFv3 sham link.
Prerequisites
The OSPFv3 IPSec has been configured.
Perform the following steps on the router that runs OSPFv3.
Issue 02 (2014-09-30)
NOTE
The SA configured on a virtual link takes precedence over that configured in an OSPFv3 process and
OSPFv3 area 0.
NOTE
The SA configured on a sham link takes precedence over that configured in an OSPFv3 process and OSPFv3
area 0.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
456