Ipsec Policy - Alcatel-Lucent 060321-10, Rev. B Cli Reference Manual

ipsec policy

ipsec policy
Adds, modifies, or removes a security policy.
ipsec policy name [priority priority] [source {ipv6_address [/prefix_length]} [port port]] [destination
{ipv6_address [/prefix_length]} [port port]] [protocol {any | icmp6 [type type]| tcp | udp | ospf | vrrp |
number protocol}] [in | out] [discard | ipsec | none] [description description] [admin-state {enable |
disable}]
no ipsec policy name
Syntax Definitions
name
priority
source ipv6_address
source /prefix_length
source port
destination ipv6_address
destination /prefix-length
destination port
protocol
in
out
discard
ipsec
none
description
admin-state enable
admin-state disable
page 12-6
The name for the policy
The priority for the policy. Values may range from 1 to 1000. The
higher the value, the higher the priority.
Specifies the source address of the IPv6 traffic that is covered by the
policy.
Specifies the prefix length of the source address of the IPv6 traffic that
is covered by the policy.
Specifies the source port of the IPv6 traffic that is covered by the policy.
The value 0 can be specified to match packets originated from any port.
Specifies the destination address of the IPv6 traffic that is covered by
the policy.
Specifies the prefix length of the destination address of the IPv6 traffic
that is covered by the policy.
Specifies the destination port of the IPv6 traffic that is covered by the
policy. The value 0 can be specified to match packets destined to any
port.
Specifies that the particular protocol specific traffic to be covered by the
policy (Refer to the table in the "Usage Guidelines" section below for
various protocol options).
Specifies that the policy is applied to the inbound IPv6 traffic.
Specifies that the policy is applied to the outbound IPv6 traffic.
Specifies the policy to discard the IPv6 packet, if it matches the criteria.
Specifies the policy to send the IPv6 packet for IPsec processing, if it
matches the criteria.
Specifies IPsec should not process the packet.
The detailed description of the policy.
Administratively enables the policy.
Administratively disables the policy.
OmniSwitch CLI Reference Guide
IPsec commands
March 2011