162 Command Reference
ipsec association
Description
Creates and manages associations in the Security Association database.
Authority
Admin session and an Ipsec Edit session
Syntax
ipsec association
copy [association_source] [association_destination]
create [association]
delete [association]
edit [association]
list [association]
rename [association_old] [association_new]
Operands
copy [association_source] [association_destination]
Creates a new association named [association_destination] and copies the configuration into it
from the association given by [association_source]. [association_destination] must not begin with
DynamicSA_
, which is reserved for dynamic associations. You must enter the Ipsec Save
command afterwards to save your changes.
create [association]
Creates an association with the name given by [association]. An association name must begin
with a letter and be no longer than 32 characters. Valid characters are alphanumeric, _, $, ^,
and -. The Security Association database supports a maximum of 512 user-defined associations.
You must enter the Ipsec Save command afterwards to save your changes.
Table 13
describes
the association configuration parameters.
Table 13
Association configuration parameters
Parameter
Description
Description
Description of the association indicating its purpose or the types of
connections which it secures.
SourceAddress
IP address (version 4 or 6) or DNS host name of the host, switch, or
gateway from which data originates
DestinationAddress
IP address (version 4 or 6) or DNS host name of the host, switch, or
gateway receiving data. If you specified an IP address for the
SourceAddress
, the
DestinationAddress
must use the same
IP version format.
Protocol
IP security protocol to be used to process data. The protocol can be
one of the following:
•
Encapsulated Security Payload–RFC 2406 (esp)
•
Encapsulated Security Payload–RFC 1827 (esp-old)
•
Authentication Header– RFC 2402 (ah)
•
Authentication Header–RFC 1826 (ah-old)
SPI
Security parameters index number in the range 256–4,294,967,295
Authentication
Algorithm to use to authenticate the source or destination. The
authentication algorithm can be one of the following:
•
HMAC-MD5
•
HMAC-SHA1
•
HMAC-SHA256
•
AES-XCBC-MAC
AuthenticationKey
Key string to use for authentication such as
"12345678901234567890"
Содержание StorageWorks SN6000
Страница 16: ...16 Command Line Interface Usage ...
Страница 20: ...20 User Account Configuration ...
Страница 34: ...34 Network Configuration ...
Страница 82: ...82 Zoning Configuration ...
Страница 86: ...86 Connection Security Configuration ...
Страница 96: ...96 Device Security Configuration ...
Страница 100: ...100 RADIUS Server Configuration ...
Страница 124: ...124 Simple Network Management Protocol Configuration ...
Страница 318: ...318 Command Reference ...
Страница 330: ...330 Index ...