Security Acl - 3Com 3C13618 Command Reference Manual

3Com Command Reference Guide — V1.00
To change the secret key, it is necessary to cancel the original secret key before a
new one can be set up.
For related commands, see ipsec policy (system view), ipsec policy (interface
view), security acl, tunnel local, tunnel remote, sa duration, proposal.
Example
# Configure the SPI of the inbound SA to 10000, and the secret key to
0x11223344556677889900112233445566; sets the SPI of the outbound SA to 20000,
and its secret key to 0x99887766554433221100998877665544 in the IPSec policy
using AH and MD5.
[3Com]ipsec proposal trans_ah
[3Com-ipsec-proposal-trans_ah] transform ah-new
[3Com-ipsec-proposal-trans_ah] ah-new authentication-algorithm md5-hmac-96
[3Com-ipsec-proposal-trans_ah] quit
[3Com] ipsec policy tianjin 100 manual
[3Com-ipsec-policy-tianjin-100] proposal trans_ah
[3Com-ipsec-policy-tianjin-100] sa inbound ah spi 10000
[3Com-ipsec-policy-tianjin-100]
11223344556677889900112233445566
[3Com-ipsec-policy-tianjin-100] sa outbound ah spi 20000
[3Com-ipsec-policy-tianjin-100]
99887766554433221100998877665544

4.1.40 security acl

Syntax
security acl acl-number
undo security acl
View
IPSec policy view
Parameter
acl-number: Specifying the number of the access control list used by the IPSec policy.
Ranging 1 to199.
84
sa inbound ah
sa outbound
hex-key-string
ah hex-key-string