C613-50631-01 Rev A Command Reference for IE340 Series 1251
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
OSPFV3 FOR IPV6 COMMANDS
IPV
6 OSPF ENCRYPTION SPI ESP
ipv6 ospf encryption spi esp
Overview Use this command in Interface Configuration mode to enable either AES-CBC
(Advanced Encryption Standard-Cipher Block Chaining) or 3DES (Triple Data
Encryption Standard) ESP (Encapsulating Security Payload) encryption for a
specified interface.
Use the no variant of this command in Interface Configuration mode to disable the
encryption configured for a specified interface.
Syntax
ipv6 ospf encryption ipsec spi <256-4294967295> esp {aes-cbc
<AES-CBC-key>|3des <3DES-key>|null} {md5 <MD5-key>|sha1
<SHA1-key>}
ipv6 ospf encryption null
no ipv6 ospf encryption ipsec spi <256-4294967295>
Default Authentication is not configured on an interface by default.
Mode Interface Configuration for a VLAN interface.
Usage notes When you issue this command, authentication and encryption are both enabled.
Configure the same SPI (Security Parameters Index) value on all interfaces that
connect to the same link. SPI values are used by link interfaces. Use a different SPI
value for a different link interface when using OSPFv3 with link interfaces.
Parameter Description
<256-
4294967295>
Specify an SPI (Security Parameters Index) value in the range 256 to
4294967295, entered as a decimal integer.
esp Specify the esp keyword (Encapsulating Security Payload) to then
apply either AES-CBC or 3DES encryption.
aes-cbc Specify this keyword to enable AES-CBC (Advanced Encryption
Standard-Cipher Block Chaining) encryption.
<AES-CBC-
key>
Enter an AES-CBC key containing either 32, 48, or 64 hexadecimal
characters.
3des Specify 3DES (Triple Data Encryption Standard) encryption.
<3DES-key> Enter a 3DES key containing 48 hexadecimal characters.
null Specify ESP without AES-CBC or 3DES encryption applied.
md5 Specify the MD5 (Message-Digest 5) encryption algorithm.
<MD5-key> Enter an MD5 key containing 32 hexadecimal characters.
sha1 Specify the SHA-1 (Secure Hash Algorithm 1) encryption algorithm.
<SHA1-key> Enter an SHA-1 key containing 40 hexadecimal characters.
null Specify no encryption is applied when no other parameters are
applied after this keyword (ipv6 ospf encryption null).