Zte ZXR10 - Set Session-Key

ZXR10CommandManual(SecurityVolume)
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#setsalifetimeseconds10000
ZXR10(config-crypto-map)#nosetsalifetimeseconds
ZXR10(config-crypto-map)#setsalifetimekilobytes20000
ZXR10(config-crypto-map)#nosetsalifetimekilobytes
Related
Commands
showcryptomap
cryptoipsecsaglobal-lifetime
setsession-key
PurposeUsethiscommandtomanuallyspecifytheIPSecuritysessionkeys
andsecurityparameterindex(SPI)forsecurityassociations.
CommandModesManualsecurityconguration
Syntaxsetsession-key{inbound|outbound}ah<spi>[hex|string
hex-key-string]
nosetsession-key{inbound|outbound}ah
setsession-key{inbound|outbound}esp<spi>[cipherhex
|string<hex-key-string>][authenticatorhex|string<hex-k
ey-string>]
nosetsession-key{inbound|outbound}esp
Syntax
Description
<spi>
ProtocolSPI,range:256~65535
<hex-key-string>Encryptionkeyorauthenticationkey,in
hexadecimalformat
md5-hmackeylengthis16characters;
sha1-hmackeylengthis20characters;
aes128keylengthis16characters;
deskeylengthis8characters;
3deskeylengthis24characters
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItismainlyimplementedonGARcurrently.
�Onlymanualtypeusesthiscommand.
�Thiscommandisusedafterthepolicyhasbeencreatedandthe
referredtransformcodehasbeenset.AuthenticationHeader
(AH)securityparameterindex(SPI)andkeycannotbesetuntil
thesettingoftheprotocolandthekeyiscorrespondenttothe
transformcode(thatis,thetransformcodeincludesauthenti-
cationheader).Thelengthofthekeymustbecorrespondent
tothesetalgorithmoftransformcode.
ExampleThisexampledescribedhowtocreateanIPSecmanualsecurity
policynamedmymapandmanuallyspecifytheIPSecuritysession
keysandsecurityparameterindex(SPI)forsecurityassociations.
ZXR10(config)#cryptoipsectransform-setmytrsesp-des
ZXR10(config)#cryptomapmymap123manual
ZXR10(config-crypto-map)#settransform-setmytrs
78CondentialandProprietaryInformationofZTECORPORATION