Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 102

How to Implement General IPSec Configurations for IPSec Networks
Command or Action
Step 14
set session-key outbound esp spi {cipher
hex-key-data authentication hex-key-data}
Example:
RP/0/RP0/CPU0:router(config-new)# set
session-key outbound esp 300 cipher
abcdefabcdefabcd authentication
9999888877776666555544443333222211110000
Step 15
exit
Example:
RP/0/RP0/CPU0:router(config-new)# exit
Step 16
end
or
commit
Example:
RP/0/RP0/CPU0:router(config)# end
or
RP/0/RP0/CPU0:router(config)# commit
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-96
Implementing IPSec Network Security on Cisco IOS XR Software
Purpose
(Optional) Manually specifies the IP Security session key to
set the outbound IPSec session key for ESP.
The length of the keys should match the encryption or
authentication method that is specified in the transform-set.
Use the spi argument to specify the SPI, a number that
•
is used to uniquely identify a security association. The
SPI is an arbitrary number you assign in the range of
256 to 4,294,967,295 (FFFF FFFF).
Use the cipher keyword to specify the key string to be
•
used with the ESP encryption transform.
Use the hex-key-data argument to specify the session
•
key; enter in hexadecimal format. This is an arbitrary
hexadecimal string of 8, 16, or 20 bytes.
Use the authentication keyword to specify that the key
•
string is used with the ESP authentication transform.
The authentication keyword is required only when the
transform set includes an ESP authentication
transform.
Exits profile configuration mode.
Saves configuration changes.
• When you issue the end command, the system prompts
you to commit changes:
Uncommitted changes found, commit them before
exiting (yes/no/cancel)?
[cancel]:
– Entering yes saves configuration changes to the
running configuration file, exits the configuration
session, and returns the router to EXEC mode.
Entering no exits the configuration session and
–
returns the router to EXEC mode without
committing the configuration changes.
Entering cancel leaves the router in the current
–
configuration session without exiting or
committing the configuration changes.
• Use the commit command to save the configuration
changes to the running configuration file and remain
within the configuration session.
OL-20382-01