HP 5920

Related commands
ipsec df-bit
ipsec { ipv6-policy | policy } (interface view)
Use ipsec { ipv6-policy | policy } to apply an IPsec policy to an interface.
Use undo ipsec { ipv6-policy | policy } to remove the application.
Syntax
ipsec { ipv6-policy | policy } policy-name
undo { ipv6-policy | policy }
Default
No IPsec policy is applied to an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-policy: Specifies an IPv6 IPsec policy.
policy: Specifies an IPv4 IPsec policy.
policy-name: Name of an IPsec policy, a case-sensitive string of 1 to 63 characters.
Usage guidelines
On an interface, you can apply only one IPsec policy. To apply a new IPsec policy to the interface, you
must first remove the IPsec policy that is already applied to the interface.
An IKE-based IPsec policy can be applied to multiple interfaces, but HP recommends applying an
IKE-based IPsec policy to only one interface. A manual IPsec policy can be applied to only one interface.
Examples
# Apply the IPsec policy policy1 to VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ipsec policy policy1
Related commands
• display ipsec { ipv6-policy | policy }
• ipsec { ipv6-policy | policy } (system view)
ipsec { ipv6-policy | policy } (system view)
Use ipsec { ipv6-policy | policy } to create an IPsec policy entry, and enter IPsec policy view.
341