R3303-HP HSR6800 Routers Security Command Reference

306
Related commands
reverse-route
reverse-route tag
Use reverse-route tag to set a route tag for the static routes created by IPsec RRI. This tag helps in
implementing flexible route control through routing policies.
Use undo reverse-route tag to restore the default.
Syntax
reverse-route tag tag-value
undo reverse-route tag
Default
The tag value is 0 for the static routes created by IPsec RRI.
Views
IPsec policy view
Default command level
2: System level
Parameters
tag-value: Sets a route tag for the static routes. The value range is 1 to 4294967295.
Usage guidelines
This command makes sense only when used together with the reverse-route command.
When you change the route tag, static IPsec RRI deletes all static routes it has created and creates new
static routes. In contrast, dynamic IPsec RRI applies the new route tag only to subsequent static routes. It
does not delete or modify static routes it has created.
For information about routing policies, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the tag value to 50 for the static routes created by IPsec RRI.
<Sysname>system-view
[Sysname] ipsec policy 1 1 isakmp
[Sysname-ipsec-policy-isakmp-1-1] reverse-route tag 50
Related commands
reverse-route
sa authentication-hex
Use sa authentication-hex to configure an authentication key for an SA.
Use undo sa authentication-hex to remove the configuration.
Syntax
sa authentication-hex { inbound | outbound } { ah | esp } [ cipher | simple ] hex-key