8/20q Fibre Channel Switch command line interface guide
35
Creating an association
To create an association, enter the
ipsec association create
command as shown in the following
example:
8/20q FC Switch #> admin start
8/20q FC Switch (admin) #> ipsec edit
8/20q FC Switch (admin-ipsec) #> ipsec association create h2h-sh-sa
A list of attributes with formatting will follow.
Enter a value or simply press the ENTER key to skip specifying a value.
If you wish to terminate this process before reaching the end of the list
press 'q' or 'Q' and the ENTER key to do so.
Required attributes are preceded by an asterisk.
Value (press ENTER to not specify value, 'q' to quit):
Description (string value, 0-127 bytes) :
Host-to-host:switch->host
*SourceAddress (hostname, IPv4, or IPv6 Address) :
fe80::2c0:ddff:fe03:d4c1
*DestinationAddress (hostname, IPv4, or IPv6 Address) :
fe80::250:daff:feb7:9d02
*Protocol (1=esp, 2=esp-old, 3=ah, 4=ah-old) : 1
*SPI (decimal value, 256-4294967295) : 333
Authentication (select an authentication algorithm)
1=hmac-md5 (16 byte key)
2=hmac-sha1 (20 byte key)
3=hmac-sha256 (32 byte key)
4=aes-xcbc-mac (16 byte key)
authentication algorithm choice : 2
*AuthenticationKey (quoted string or raw hex bytes) :
"12345678901234567890"
*Encryption (select an encryption algorithm)
1=des-cbc (8 byte key)
2=3des-cbc (24 byte key)
3=null (0 byte key)
4=blowfish-cbc (5-56 byte key)
5=aes-cbc (16/24/32 byte key)
6=twofish-cbc (16-32 byte key)
encryption algorithm choice : 2
*EncryptionKey (quoted string or raw hex bytes) :
"123456789012345678901234"
The security association has been created.
This configuration must be saved with the 'ipsec save' command
before it can take effect, or to discard this configuration
use the 'ipsec cancel' command.
Deleting an association
To delete a user-defined association, enter the
ipsec association delete
command as shown in the
following example:
8/20q FC Switch #> admin start
8/20q FC Switch (admin) #> ipsec edit
8/20q FC Switch (admin-ipsec) #> ipsec association delete association_1
The security association will be deleted. Please confirm (y/n): [n] y
8/20q FC Switch (admin-ipsec) #> ipsec save
The IPsec configuration will be saved and activated.
Please confirm (y/n): [n] y
Summary of Contents for 8/20q
Page 14: ...14 About this guide ...
Page 20: ...20 Command line interface usage ...
Page 24: ...24 User account configuration ...
Page 38: ...38 Network configuration ...
Page 90: ...90 Connection security configuration ...
Page 100: ...100 Device security configuration ...
Page 104: ...104 RADIUS server configuration ...
Page 110: ...110 Event log configuration ...
Page 130: ...130 Simple Network Management Protocol configuration ...
Page 322: ...322 Command reference ...
Page 332: ...332 Index ...