HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

194
[RouterA] ipsec policy policy001 10 manual
[RouterA-ipsec-policy-manual-policy001-10] transform-set tran1
[RouterA-ipsec-policy-manual-policy001-10] sa spi outbound esp 123456
[RouterA-ipsec-policy-manual-policy001-10] sa spi inbound esp 123456
[RouterA-ipsec-policy-manual-policy001-10] sa string-key outbound esp abcdefg
[RouterA-ipsec-policy-manual-policy001-10] sa string-key inbound esp abcdefg
[RouterA-ipsec-policy-manual-policy001-10] quit
# Apply IPsec policy policy001 to the RIPng process.
[RouterA] ripng 1
[RouterA-ripng-1] enable ipsec-policy policy001
[RouterA-ripng-1] quit
2. Configure Router B:
# Assign an IPv6 address to each interface. (Details not shown.)
# Create a RIPng process and enable it on Ethernet 1/1 and Ethernet 1/2.
<RouterB> system-view
[RouterB] ripng 1
[RouterB-ripng-1] quit
[RouterB] interface ethernet 1/1
[RouterB-Ethernet1/1] ripng 1 enable
[RouterB-Ethernet1/1] quit
[RouterB] interface ethernet 1/2
[RouterB-Ethernet1/2] ripng 1 enable
[RouterB-Ethernet1/2] quit
# Create an IPsec transform set named tran1, and set the encapsulation mode to transport
mode, the security protocol to ESP, the encryption algorithm to DES, and authentication
algorithm to SHA1-HMAC-96.
[RouterB] ipsec transform-set tran1
[RouterB-ipsec-transform-set-tran1] encapsulation-mode transport
[RouterB-ipsec-transform-set-tran1] transform esp
[RouterB-ipsec-transform-set-tran1] esp encryption-algorithm des
[RouterB-ipsec-transform-set-tran1] esp authentication-algorithm sha1
[RouterB-ipsec-transform-set-tran1] quit
# Create an IPsec policy named policy001, specify the manual mode for it, configure the SPIs
of the inbound and outbound SAs as 123456, and the keys for the inbound and outbound SAs
using ESP as abcdefg.
[RouterB] ipsec policy policy001 10 manual
[RouterB-ipsec-policy-manual-policy001-10] transform-set tran1
[RouterB-ipsec-policy-manual-policy001-10] sa spi outbound esp 123456
[RouterB-ipsec-policy-manual-policy001-10] sa spi inbound esp 123456
[RouterB-ipsec-policy-manual-policy001-10] sa string-key outbound esp abcdefg
[RouterB-ipsec-policy-manual-policy001-10] sa string-key inbound esp abcdefg
[RouterB-ipsec-policy-manual-policy001-10] quit
# Apply IPsec policy policy001 to the RIPng process.
[RouterB] ripng 1
[RouterB-ripng-1] enable ipsec-policy policy001
[RouterB-ripng-1] quit
3. Configure Router C:
# Assign an IPv6 address to each interface. (Details not shown.)

HPE FlexNetwork MSR Series Specifications

General

Category	Network Router
WAN Ports	Varies by model
LAN Ports	Varies by model
Switching Capacity	Varies by model
IPv6 Support	Yes
Product Series	MSR Series
Routing Protocols	BGP, OSPF, RIP, IS-IS, Static Routing
WAN Interfaces	Ethernet, Serial, T1/E1
LAN Interfaces	Ethernet, Fast Ethernet, Gigabit Ethernet
Power Supply	AC or DC (varies by model)
Management	CLI, Web GUI, SNMP
VPN Support	IPsec, GRE, L2TP, DMVPN
QoS Support	Yes
Ports	Varies by model
Firewall	Stateful packet inspection, DoS/DDoS protection, Application layer filtering