Managing Policies - HP AA979A - StorageWorks SAN Switch 2/8V Administrator's Manual

Hp storageworks fabric os 5.2.x administrator guide (5697-0014, november 2009)
Hide thumbs Also See for AA979A - StorageWorks SAN Switch 2/8V:
Table of Contents

Advertisement

Managing policies

Use the policy command to create, delete, and show IKE and IPSec policies.
To create a new policy
1.
Log in to the switch as admin.
2.
At the command prompt, type:
policy --create type number [-enc encryption_method][-auth
authentication_algorithm] [-pfs off|on] [-dh DH_group] [-seclife secs]
where:
type and number
encryption_method
authentication_algorithm
DH_Group
secs
The following example shows how to create IKE policy number 10 using 3DES encryption, MD5
authentication, and Diffie-Hellman Goup 1:
switch:admin06> policy --create ike 10 -enc 3des -auth md5 -dh 1
The following policy has been set:
IKE Policy 10
-----------------------------------------
Authentication Algorithm: MD5
Encryption: 3DES
Perfect Forward Secrecy: on
Diffie-Hellman Group: 1
SA Life (seconds): 28800
Operation Succeeded
For a complete description of the policy command, see the Fabric OS Command Reference Manual.
To display policy settings
1.
To display the settings for a single policy, type:
policy --show type number
For example, to view the IPSec 1 policy, type:
policy --show ipsec 1
2.
To display the policy settings for all defined policies, type:
policy --show type all
374 Configuring and monitoring FCIP tunneling
The type of policy being created (IKE or IPSec) and the number for this type of
policy. To easily determine how many policies have been created, consider using
sequential numbering. The range of valid values is any whole number from 1
through 32.
The supported type of encryption. Valid options are 3DES, AES- 1 28, and
AES-256. AES- 1 28 is the default.
The authentication algorithm. Valid options are SHA-1, MD5, and AES-XCBC
(IPSec only). HA- 1 is the default.
The Diffie-Hellman group. Supported groups are Group 1 and Group 14. Group
1 is the default.
The security association lifetime in seconds. 28800 is the default.

Advertisement

Table of Contents
loading

Table of Contents