ZXR10CommandManual(SecurityVolume)
CommandModesIPSecconguration
Syntaxspddelete<sp-index>
spddelete<source-address>/<prefix><destination-address>/
<prefix>bgp{any|bgp-port}{any|bgp-port{in|out}
ipsec}
spddelete<source-address>/<prefix><destination-address>/
<prefix>{ospf|ripng}{in|out}ipsec}
Syntax
Description
<source-address>/
<prefix>
SourceIPV6addressandnetworkprexof
thepacketneedingtheIPSecprotection,in
X:X::X:X/<0~128>format
<destination-address
>/<prefix>
DestinationIPV6addressandnetworkprex
ofthepacketneedingtheIPSecprotection,in
X:X::X:X/<0~128>format
bgp|ospf|ripng
Routingprotocoltype,indicatingBGP4+,
OSPFV3andRIPNGrespectively
any|bgp-portSourceportcorrespondingtotheBGP4+
protocol
any|bgp-portDestinationportcorrespondingtotheBGP4+
protocol
in|outSPdirection,incomingoroutgoing
ipsec
IdentiestheIPSecpolicyisapplied
<sp-index>IndexassociatedwiththeSPpolicy,range:
1~2147483647
InstructionsTheplatformversion4.6.02andupgradeversionssupportthis
command.
ExampleItissupposedthattheIPSechmac-md5authenticationprotec-
tionisforOSPFv3betweentherouter3ffe::01(link-localaddress:
fe80::2d0:d0ff:fec0:680)andtherouter3ffe::02(link-localad-
dress:fe80::2d0:d0ff:fec4:ff40).Andtheoutgoingsecuritypol-
icyandsecurityassociationoftherouter3ffe::01isconguredas
follows(notethatpartialOSPFV3interactionadoptsthelink-local
addressandmulticastaddress).Atlast,thecongurationofthe
IPSecsecuritypolicyisdeleted.
ZXR10(config)#ipsec
ZXR10(config-ipsec)#spddeletefe80::2d0:d0ff:fec0:680/64
ff02::5/64ospfoutipsec
ZXR10(config-ipsec)#spddelete100
Related
Commands
ipsec
sadadd
sadclear
saddelete
saddetail
sadflush
spdadd
spdflush
92CondentialandProprietaryInformationofZTECORPORATION