R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

33
IPsec configuration commands
NOTE:
The term
router in this document refers to both routers and firewall.
ah authentication-algorithm
Syntax
ah authentication-algorithm { md5 | sha1 }
undo ah authentication-algorithm
View
IPsec proposal view
Default level
2: System level
Parameters
md5: Uses MD5.
sha1: Uses SHA1.
Description
Use the ah authentication-algorithm command to specify an authentication algorithm for the
authentication header (AH) protocol.
Use the undo ah authentication-algorithm command to restore the default.
By default, MD5 is used.
Before specifying the authentication algorithm for AH, be sure to use the transform command to specify
the security protocol as AH or both AH and ESP.
Related commands: ipsec proposal and transform.
Examples
# Configure IPsec proposal prop1 to use AH and SHA1.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] transform ah
[Sysname-ipsec-proposal-prop1] ah authentication-algorithm sha1
cryptoengine enable
Syntax
cryptoengine enable
undo cryptoengine enable