Using A Manual Key Policy - Lenovo ThinkSystem NE2552E Application Manual

Using a Manual Key Policy

1. Enter a manual policy to configure.
2. Configure the policy.
348
NE2552E Application Guide for ENOS 8.4
A manual policy involves configuring policy and manual SA entries for local and
remote peers.
To configure a manual key policy, you need:
 The IP address of the peer in IPv6 format (for example, "3000::1").
 Inbound/Outbound session keys for the security protocols.
You can then assign the policy to an interface. The peer represents the other end of
the security association. The security protocol for the session key can be either ESP
or AH.
To create and configure a manual policy:
NE2552E(config)# ipsec manual-policy <policy number>
NE2552E(config-ipsec-manual)#peer <peer's IPv6 address>
NE2552E(config-ipsec-manual)#traffic-selector <IPsec traffic selector>
NE2552E(config-ipsec-manual)#transform-set <IPsec transform set>
NE2552E(config-ipsec-manual)#in-ah auth-key <inbound AH IPsec key>
NE2552E(config-ipsec-manual)#in-ah auth-spi <inbound AH IPsec SPI>
NE2552E(config-ipsec-manual)#in-esp cipher-key <inbound ESP cipher key>
NE2552E(config-ipsec-manual)#in-esp auth-spi <inbound ESP SPI>
NE2552E(config-ipsec-manual)#in-esp auth-key <inbound ESP authenticator key>
NE2552E(config-ipsec-manual)#out-ah auth-key <outbound AH IPsec key>
NE2552E(config-ipsec-manual)#out-ah auth-spi <outbound AH IPsec SPI>
NE2552E(config-ipsec-manual)#out-esp cipher-key <outbound ESP cipher key>
NE2552E(config-ipsec-manual)#out-esp auth-spi <outbound ESP SPI>
NE2552E(config-ipsec-manual)#out-esp auth-key <outbound ESP authenticator key>
where the following parameters are used:
 peer's IPv6 address
 IPsec traffic‐selector
 IPsec of transform‐set
 inbound AH IPsec key
 inbound AH IPsec SPI
 inbound ESP cipher key
inbound ESP SPI

 inbound ESP authenticator key The inbound ESP authenticator key code, in
outbound AH IPsec key

 outbound AH IPsec SPI
 outbound ESP cipher key
outbound ESP SPI

The IPv6 address of the peer (for example,
3000::1)
A number from1‐10
A number from1‐10
The inbound AH key code, in hexadecimal
A number from 256‐4294967295
The inbound ESP key code, in hexadecimal
A number from 256‐4294967295
hexadecimal
The outbound AH key code, in hexadecimal
A number from 256‐4294967295
The outbound ESP key code, in hexadecimal
A number from 256‐4294967295