Lenovo RackSwitch G8264, Справочник по командам

Страница: 557 / 794

© Copyright Lenovo 2017 Chapter 4: Configuration Commands
557
OSPFv3 over IPSec for Virtual Link Configuration
The following table describes the OSPFv3 over IPsec for Virtual Link
Configuration commands.
Table 295.
Layer 3 IPsec Configuration Options
Command Syntax and Usage
area ­ virtual ­ link
<1 ‐ 3>
authentication ipsec enable
Enables OSPFv3 IPsec authentication .
Command mode: Router OSPF3
area ­ virtual ­ link
<1 ‐ 3>
authentication ipsec spi
<256 ‐ 4294967295>
{md5
<md5 key>
|sha1
<sha1 key>
}
Configures the OSPFv3 security parameter index authentication.
Command mode: Router OSPF3
no area ­ virtual ­ link
<1 ‐ 3>
authentication ipsec spi
<256 ‐ 4294967295>
Removes the specified OSPFv3 Security Parameters Index (SPI).
Command mode: Router OSPF3
area ­ virtual ­ link
<1 ‐ 3>
authentication ipsec default
Resets the IPsec Authentication Header (AH) to its default values.
Command mode: Router OSPF3
area ­ virtual ­ link
<1 ‐ 3>
encryption ipsec enable
Enables OSPFv3 IPsec encryption.
Command mode: Router OSPF3
area ­ virtual ­ link
<1 ‐ 3>
encryption ipsec spi
<256 ‐ 4294967295>
esp {3des|aes ­ cbc|null}
<encryption key (hexadecimal)>
{md5|sha1|none}
<authentication key (hexadecimal)>
Configures the Security Parameters Index (SPI), encryption algorithm,
authentication algorithm, and authentication key for the Encapsulating
Security Payload (ESP). The ESP algorithms supported are:

3des
(hexadecimal key length is 48)

aes ­ cbc
(hexadecimal key length is 32)

null
means ESP with no encryption.
The authentication algorithms supported are:

md5
(hexadecimal key length is 32)

sha1
(hexadecimal key length is 40)

none
means ESP with no authentication.
Note: If the encryption algorithm is null, the authentication algorithm must be
either MD5 or SHA1. If an encryption algorithm is specified (3DES or
AES ‐ CBC), the authentication algorithm can be
none
.
Command mode: Router OSPF3