Huawei Quidway NetEngine80E Configuration Manual page 515

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
Step 6 Configure SAs for OSPFv3 processes.
# Configure an SA for the OSPFv3 process on RouterA.
[RouterA] ospfv3 1
[RouterA-ospfv3-1] ipsec sa sa1
[RouterA-ospfv3-1] quit
# Configure an SA for the OSPFv3 process on RouterB.
[RouterB] ospfv3 1
[RouterB-ospfv3-1] ipsec sa sa2
[RouterB-ospfv3-1] quit
Step 7 Verify the configuration.
# Run the display ipsec sa command on RouterA and RouterB to view configurations. Use the
display on RouterA as an example.
[RouterA] display ipsec sa
Total IP security association number: 1
IP security association name: sa1
Number of references: 1
# Run the display ipsec statistics command to view statistics about incoming and outgoing
packets processed by IPSec and detailed information about dropped packets. If statistics about
incoming and outgoing packets processed by IPSec are displayed, the configuration succeeds.
For example:
[RouterA] display ipsec statistics
IPv6 security packet statistics:
the normal packet statistics:
Issue 02 (2014-09-30)
proposal name: proposal1
inbound AH setting:
AH spi:
AH string-key:
AH authentication hex key:
inbound ESP setting:
ESP spi: 12345 (0x3039)
ESP string-key: b{br9\zi%X+/Y@:Y>Lw(L\v#
ESP encryption hex key:
ESP authentication hex key:
outbound AH setting:
AH spi:
AH string-key:
AH authentication hex key:
outbound ESP setting:
ESP spi: 12345 (0x3039)
ESP string-key: D0>GQf"}w2@X,k6.E\Z,z\{#
ESP encryption hex key:
ESP authentication hex key:
input/output security packets: 184/19
input/output security bytes: 13216/1312
input/output dropped security packets: 0/0
dropped security packet detail:
memory process problem: 0
can't find SA: 0
queue is full: 0
authentication is failed: 0
wrong length: 0
replay packet: 0
too long packet: 0
invalid SA: 0
policy deny: 0
input/output dropped normal packets: 0/0
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 OSPFv3 Configuration
490