Alcatel-Lucent 060321-10, Rev. B Cli Reference Manual page 661

IPsec commands
Defaults
parameter
priority
port
any | icmp6 | tcp | udp | ospf |
vrrp | number
icmp6 type
discard | ipsec | none
admin-state
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
If two policies can cover the same traffic, the policy with the highest priority is applied. If two policies
have the same priority, the one configured first has precedence.
•
The following table lists the various protocol options in this command:
protocol
any
icmp6[type type]
tcp
udp
ospf
vrrp
number protocol
The any option must be used to apply the policy to all protocol traffic. Otherwise, an upper-layer protocol
(or protocol number) may be specified to restrict the policy to the specified protocol traffic. The optional
type parameter of icmp6 can also be specified to restrict the policy for certain type of ICMPv6
packets.
•
If the ipsec option is specified this policy cannot be enabled until at least one rule has been defined.
The policy rules specify that IPsec algorithms be applied to the traffic that matches the policy.
OmniSwitch CLI Reference Guide
default
100
0
any
not present
ipsec
enable
March 2011
ipsec policy
page 12-7