C613-50170-01 Rev B
Command Reference for x510 Series
1092
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
OSPF
V
3
FOR
IP
V
6 C
OMMANDS
AREA
VIRTUAL
-
LINK
ENCRYPTION
IPSEC
SPI
area virtual-link encryption ipsec spi
Overview
Use this command in Router Configuration mode to enable either AES-CBC
(Advanced Encryption Standard-Cipher Block Chaining) or 3DES (Triple Data
Encryption Standard) ESP (Encapsulating Security Payload) encryption for virtual
links in a specified OSPF area.
Use the
no
variant of this command in Router Configuration mode to disable
encryption configured for virtual links in a specified OSPF area.
Syntax
area <
area-id
> virtual-link <
router-ID
> encryption ipsec spi
<
256-4294967295
> esp {aes-cbc <
AES-CBC-key
>|3des
<
3DES-key
>|null}{md5 <
MD5-key
>|sha1 <
SHA1-key
>}
no area <
area-id
> encryption ipsec spi <
256-4294967295
>
Parameter
Description
<
area-id
>
The OSPF area that you are specifying the summary route
default- cost for. This can be entered in either dotted decimal
format or normal decimal format. Use one of the following
formats:
<ip-addr>
OSPF area-ID expressed in IPv4
address format A.B.C.D.
<0-4294967295>
OSPF area-ID expressed as a decimal
number within the range shown.
For example, the values 0.0.1.2 and decimal 258 would both
define the same area-ID.
virtual-link
Specify a virtual link and its parameters.
<
router-ID
>
Enter a router ID associated with a virtual link neighbor in
IPv4 address format A.B.C.D.
encryption
Specify this keyword to enable encryption.
ipsec
Specify this keyword to use IPsec authentication.
spi
Specify this keyword to set the SPI (Security Parameters
Index).
<
256-4294967295
>
Specify an SPI (Security Parameters Index) value in the range
256 to 4294967295, entered as a decimal integer.
esp
Specify the esp keyword (Encapsulating Security Payload) to
then apply either AES-CBC or 3DES encryption.
aes-cbc
Specify this keyword to enable AES-CBC (Advanced
Encryption Standard-Cipher Block Chaining) encryption.
<
AES-CBC-key
>
Enter an AES-CBC key containing either 32, 48, or 64
hexadecimal characters.
3des
Specify 3DES (Triple Data Encryption Standard) encryption.
<
3DES-key
>
Enter a 3DES key containing 48 hexadecimal characters.