Lenovo RackSwitch G8264 Command Reference Manual page 596

596
G8264 Command Reference for ENOS 8.4
Table 326.
IPsec Manual Policy Options (continued)
Command Syntax and Usage
out­ah spi <256‐4294967295>
Sets the outbound Authentication Header (AH) Security Parameter Index
(SPI).
Note: For manual policies, when peering with a third‐party device, key
lengths are fixed to 20 characters for SHA1.
Command mode: IPsec manual policy
out­esp {auth­key|cipher­key} <key code (hexadecimal)>
Sets the outbound Encapsulating Security Payload (ESP) authenticator key or
cipher key.
Note: For manual policies, when peering with a third‐party device, key
lengths are fixed to 8 characters for DES and to 24 characters for 3DES and
AES‐CBC encryption.
Command mode: IPsec manual policy
out­esp spi <256‐4294967295>
Sets the outbound Encapsulating Security Payload (ESP) Security Parameter
Index (SPI).
Note: For manual policies, when peering with a third‐party device, key
lengths are fixed to 20 characters for SHA1.
Command mode: IPsec manual policy
peer <IPv6 address>
Sets the remote peer IP address.
Command mode: IPsec manual policy
traffic­selector <1‐10>
Sets the traffic selector for the IPsec policy.
Command mode: IPsec manual policy
transform­set <1‐10>
Sets the transform set for the IPsec policy.
Command mode: IPsec manual policy
show ipsec manual­policy <1‐10>
Displays the current IPsec manual policy settings.
Command mode: All