Huawei Quidway NetEngine80E Configuration Manual page 514

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
[RouterB-GigabitEthernet1/0/1] ipv6 address 2001:DB8:100::2 64
[RouterB-GigabitEthernet1/0/1] ospfv3 1 area 1
[RouterB-GigabitEthernet1/0/1] quit
Step 3 Configure security proposals on RouterA and RouterB.
# Configure a security proposal on RouterA.
[RouterA] ipsec proposal proposal1
[RouterA-ipsec-proposal-proposal1] encapsulation-mode transport
[RouterA-ipsec-proposal-proposal1] transform esp
[RouterA-ipsec-proposal-proposal1] undo esp encryption-algorithm
[RouterA-ipsec-proposal-proposal1] esp authentication-algorithm sha1
[RouterA-ipsec-proposal-proposal1] quit
# Configure a security proposal on RouterB.
[RouterB] ipsec proposal proposal2
[RouterB-ipsec-proposal-proposal2] encapsulation-mode transport
[RouterB-ipsec-proposal-proposal2] transform esp
[RouterB-ipsec-proposal-proposal2] undo esp encryption-algorithm
[RouterB-ipsec-proposal-proposal2] esp authentication-algorithm sha1
[RouterB-ipsec-proposal-proposal2] quit
# Run the display ipsec proposal command on RouterA and RouterB to view configurations.
Use the display on RouterA as an example.
[RouterA] display ipsec proposal
Total IP security proposal number: 1
IP security proposal name: proposal1
encapsulation mode: transport
transform: esp-new
ESP protocol: authentication MD5-HMAC-96, not use encryption
Step 4 Configure SAs and apply them to RouterA and RouterB.
# Configure an SA and apply it to RouterA.
[RouterA] ipsec sa sa1
[RouterA-ipsec-sa-sa1] proposal proposal1
[RouterA-ipsec-sa-sa1] quit
# Configure an SA and apply it to RouterB.
[RouterB] ipsec sa sa2
[RouterB-ipsec-sa-sa2] proposal proposal2
[RouterB-ipsec-sa-sa2] quit
Step 5 Configure SPIs and authentication keys in the string format on RouterA and RouterB.
# Configure SPIs and authentication keys in the string format on RouterA.
[RouterA] ipsec sa sa1
[RouterA-ipsec-sa-sa1] sa spi inbound esp 12345
[RouterA-ipsec-sa-sa1] sa spi outbound esp 12345
[RouterA-ipsec-sa-sa1] sa string-key inbound esp Huawei-123
[RouterA-ipsec-sa-sa1] sa string-key outbound esp Huawei-123
[RouterA-ipsec-sa-sa1] quit
# Configure SPIs and authentication keys in the string format on RouterB.
[RouterB] ipsec sa sa2
[RouterB-ipsec-sa-sa2] sa spi outbound esp 12345
[RouterB-ipsec-sa-sa2] sa spi inbound esp 12345
[RouterB-ipsec-sa-sa2] sa string-key outbound esp Huawei-123
[RouterB-ipsec-sa-sa2] sa string-key inbound esp Huawei-123
[RouterB-ipsec-sa-sa2] quit
Issue 02 (2014-09-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
489