Canon VB-730F Mk II Operation Manual page 195

Since this setting is used as an ID for identifying the SA, be careful not to specify an inbound SPI whose value is
already used in another ESP's SPI.
If the Setting in [IPsec Protocol] Includes "AH"
[SA AH Authentication Algorithm]
Set the AH authentication algorithm to suit the authentication algorithm supported by the device to connect to.
[SA AH Authentication Key (outbound)]
Enter the SA authentication key for outbound.
5
If [HMAC_SHA1_96] or [HMAC_MD5_96] was selected in [SA AH Authentication Algorithm], set a 160-bit or 128-bit
hexadecimal number, respectively.
[SA AH SPI (outbound)]
Enter the SA SPI value for outbound.
Set a desired value in the range of 256 to 4294967295.
[SA AH Authentication Key (inbound)]
Enter the SA authentication key for inbound.
If [HMAC_SHA1_96] or [HMAC_MD5_96] was selected in [SA AH Authentication Algorithm], set a 160-bit or 128-bit
hexadecimal number, respectively.
[SA AH SPI (inbound)]
Enter the SA SPI value for inbound.
Set a desired value in the range of 256 to 4294967295.
Since this setting is used as an ID for identifying the SA, be careful not to specify an inbound SPI whose value is
already used in another AH's SPI.
195