Ospfv3 Over Ipsec For Virtual Link Configuration - Lenovo RackSwitch G8264 Command Reference Manual

OSPFv3 over IPSec for Virtual Link Configuration

© Copyright Lenovo 2017
The following table describes the OSPFv3 over IPsec for Virtual Link
Configuration commands.
Table 295.
Layer 3 IPsec Configuration Options
Command Syntax and Usage
area­virtual­link <1‐3> authentication ipsec enable
Enables OSPFv3 IPsec authentication .
Command mode: Router OSPF3
area­virtual­link <1‐3> authentication ipsec spi
<256‐4294967295> {md5 <md5 key>|sha1 <sha1 key>}
Configures the OSPFv3 security parameter index authentication.
Command mode: Router OSPF3
no area­virtual­link <1‐3> authentication ipsec spi
<256‐4294967295>
Removes the specified OSPFv3 Security Parameters Index (SPI).
Command mode: Router OSPF3
area­virtual­link <1‐3> authentication ipsec default
Resets the IPsec Authentication Header (AH) to its default values.
Command mode: Router OSPF3
area­virtual­link <1‐3> encryption ipsec enable
Enables OSPFv3 IPsec encryption.
Command mode: Router OSPF3
area­virtual­link <1‐3> encryption ipsec spi <256‐4294967295>
esp {3des|aes­cbc|null} <encryption key (hexadecimal)>
{md5|sha1|none} <authentication key (hexadecimal)>
Configures the Security Parameters Index (SPI), encryption algorithm,
authentication algorithm, and authentication key for the Encapsulating
Security Payload (ESP). The ESP algorithms supported are:
3des (hexadecimal key length is 48)

aes­cbc (hexadecimal key length is 32)

null means ESP with no encryption.

The authentication algorithms supported are:
md5 (hexadecimal key length is 32)

sha1 (hexadecimal key length is 40)

none means ESP with no authentication.

Note: If the encryption algorithm is null, the authentication algorithm must be
either MD5 or SHA1. If an encryption algorithm is specified (3DES or
AES‐CBC), the authentication algorithm can be none.
Command mode: Router OSPF3
Chapter 4: Configuration Commands
557