Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual page 416

Configuring IPsec
Algorithm
HMAC-SHA1
AES-XCBC-MAC
Use the following information to determine how to create the proper key size:
•
Number of Characters = Key Size (in bits) / 8; Ex. A 160-bit key would require 20 characters for the
key.
•
Number of Hexidecimal = Key Size (in bits) / 4; Ex. A 160-bit key would require 40 hexidecimal
digits.
Note. The name parameter must be the same as the name of the manually configured IPsec SA
combination of the key name and type must be unique.
Use the no form of this command to delete the configured IPsec SA key. For example:
-> no ipsec key tcp_in_ah
Verifying IPsec SA Key
To display the encryption key values which are configured for manually configured IPsec SAs, use the
show ipsec key command For example:
-> show ipsec key sa-encryption
Encryption Keys
Name
--------------------+---------------
sa_1
sa_2
sa_3
The above command shows the number of manually configured SAs along with their encryption key
lengths in bits respectively. To display the IPsec SA keys used for authentication, use the
command, as shown below:
-> show ipsec key sa-authentication
Authentication Keys
Name
--------------------+----------------
tcp_in_ah
sa_1
sa_5
The above command shows the number of manually configured SAs along with their authentication key
lengths in bits respectively.
Note. Due to security reasons, key values will not be displayed; only key names and key lengths will be
displayed.
OmniSwitch AOS Release 8 Network Configuration Guide
Key Length
160 Bits
128 Bits
Length (bits)
192
160
64
Length (bits)
160
128
160
Configuring IPsec on the OmniSwitch
December 2017
. Also, the
show ipsec key
page 18-17