Allied Telesis x510-28GPX, Справочник по командам

Страница: 1116 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1116
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
OSPF
V
3
FOR
IP
V
6 C
OMMANDS
IPV
6
OSPF ENCRYPTION SPI ESP
ipv6 ospf encryption spi esp
Overview Use this command in Interface Configuration mode to enable either AES-CBC
(Advanced Encryption Standard-Cipher Block Chaining) or 3DES (Triple Data
Encryption Standard) ESP (Encapsulating Security Payload) encryption for a
specified interface.
Use the no variant of this command in Interface Configuration mode to disable the
encryption configured for a specified interface.
Syntax
ipv6 ospf encryption ipsec spi < 256-4294967295 > esp {aes-cbc
< AES-CBC-key >|3des < 3DES-key >|null}{md5 < MD5-key >|sha1
< SHA1-key >}
ipv6 ospf encryption null
no ipv6 ospf encryption ipsec spi < 256-4294967295 >
Default Authentication is not configured on an interface by default.
Mode Interface Configuration
Usage When you issue this command, authentication and encryption are both enabled.
Configure the same SPI (Security Parameters Index) value on all interfaces that
connect to the same link. SPI values are used by link interfaces. Use a different SPI
value for a different link interface when using OSPFv3 with link interfaces.
Parameter Description
< 256-
4294967295 >
Specify an SPI (Security Parameters Index) value in the range 256 to
4294967295, entered as a decimal integer.
esp
Specify the esp keyword (Encapsulating Security Payload) to then
apply either AES-CBC or 3DES encryption.
aes-cbc
Specify this keyword to enable AES-CBC (Advanced Encryption
Standard-Cipher Block Chaining) encryption.
< AES-CBC-
key >
Enter an AES-CBC key containing either 32, 48, or 64 hexadecimal
characters.
3des
Specify 3DES (Triple Data Encryption Standard) encryption.
< 3DES-key >
Enter a 3DES key containing 48 hexadecimal characters.
null
Specify ESP without AES-CBC or 3DES encryption applied.
md5
Specify the MD5 (Message-Digest 5) encryption algorithm.
< MD5-key >
Enter an MD5 key containing 32 hexadecimal characters.
sha1
Specify the SHA-1 (Secure Hash Algorithm 1) encryption algorithm.
< SHA1-key >
Enter an SHA-1 key containing 40 hexadecimal characters.
null
Specify no encryption is applied when no other parameters are
applied after this keyword (
ipv6 ospf encryption null
).