Configuring IPsec Quick Steps for Configuring an IPsec Discard Policy
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 18-4
Quick Steps for Configuring an IPsec Discard 
Policy
IPsec can be used for discarding IPv6 traffic as well as configuring encryption and authentication. For 
discard policies, no rules, SAs or keys need to be defined.
1 Define the policy. The commands below use similar policy information as in the previous example but 
the action has been changed to discard:
-> ipsec policy Discard_ALLoutMD5 source 664:1:1:1::199/64 destination 
664:1:1:1::1/64 protocol any out discard admin-state enable
-> ipsec policy Discard_ALLinMD5 source 664:1:1:1::1/64 destination 
664:1:1:1::199/64 protocol any in discard admin-state enable
2 Use the following show commands to verify the IPsec configuration: 
-> show ipsec policy
-> show ipsec ipv6 statistics