Allied Telesis AT-x510-28GPX, Command Reference Manual

Page: 1004 / 2601

C613-50102-01 REV C Command Reference for x510 Series 1004
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
OSPF
V
3
FOR
IP
V
6 C
OMMANDS
AREA ENCRYPTION IPSEC SPI ESP
area encryption ipsec spi esp
Overview Use this command in Router Configuration mode to enable either AES-CBC
(Advanced Encryption Standard-Cipher Block Chaining) or 3DES (Triple Data
Encryption Standard) ESP (Encapsulating Security Payload) encryption for a
specified OSPF area.
Use the no variant of this command in Router Configuration mode to disable the
encryption configured for a specified OSPF area.
Syntax
area < area-id > encryption ipsec spi < 256-4294967295 > esp
{aes-cbc < AES-CBC-key >|3des < 3DES-key >|null}{md5
< MD5-key >|sha1 < SHA1-key >}
no area < area-id > encryption ipsec spi < 256-4294967295 >
Mode Router Configuration
Parameter Description
< area-id >
The OSPF area that you are specifying the summary route default-
cost for. This can be entered in either dotted decimal format or
normal decimal format. Use one of the following formats:
<ip-addr>
OSPF area-ID expressed in IPv4 address
format A.B.C.D.
<0-4294967295>
OSPF area-ID expressed as a decimal number
within the range shown.
For example, the values 0.0.1.2 and decimal 258 would both define
the same area-ID.
< 256-
4294967295 >
Specify an SPI (Security Parameters Index) value in the range 256 to
4294967295, entered as a decimal integer.
esp
Specify the esp keyword (Encapsulating Security Payload) to then
apply either AES-CBC or 3DES encryption.
aes-cbc
Specify this keyword to enable AES-CBC (Advanced Encryption
Standard-Cipher Block Chaining) encryption.
< AES-CBC-
key >
Enter an AES-CBC key containing either 32, 48, or 64 hexadecimal
characters.
3des
Specify 3DES (Triple Data Encryption Standard) encryption.
< 3DES-key >
Enter a 3DES key containing 48 hexadecimal characters.
null
Specify ESP without AES-CBC or 3DES encryption applied.
md5
Specify the MD5 (Message-Digest 5) encryption algorithm.
< MD5-key >
Enter an MD5 key containing 32 hexadecimal characters.
sha1
Specify the SHA-1 (Secure Hash Algorithm 1) encryption algorithm.
< SHA1-key >
Enter an SHA-1 key containing 40 hexadecimal characters.