HP FlexNetwork 10500 Series Security Configuration Manual page 301

Step
3. (Optional.) Configure a
description for the
IPsec policy.
4. Specify an ACL for the
IPsec policy.
5. Specify an IPsec
transform set for the
IPsec policy.
6. Specify the remote IP
address of the IPsec
tunnel.
7. Configure an SPI for the
inbound or outbound
IPsec SA.
Command
description text
security acl [ ipv6 ] { acl-number
| name acl-name }
transform-set
transform-set-name
remote-address { ipv4-address |
ipv6 ipv6-address }
•
To configure an SPI for the
inbound IPsec SA:
sa spi inbound { ah | esp }
spi-number
•
To configure an SPI for the
outbound IPsec SA:
sa spi outbound { ah |
esp } spi-number
287
Remarks
By default, no description is configured.
By default, no ACL is specified for an
IPsec policy.
You can specify only one ACL for an
IPsec policy.
By default, no IPsec transform set is
specified for an IPsec policy.
You can specify only one IPsec
transform set for a manual IPsec policy.
By default, the remote IP address of the
IPsec tunnel is not specified.
The local IPv4 address of the IPsec
tunnel is the primary IPv4 address of
the interface to which the IPsec policy is
applied. The local IPv6 address of the
IPsec tunnel is the first IPv6 address of
the interface to which the IPsec policy is
applied.
By default, no SPI is configured for the
inbound or outbound IPsec SA.