Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)

hmac-sha384 (384-bit key)
hmac-sha512 (512-bit key)
hmac-ripemd160 (160-bit key)
keyed-md5 (128-bit key)
keyed-sha1 (160-bit key)
null (0- to 2048-bit key)
Tcp-md5 (8- to 640-bit key)
-C calgo [R]
Specifies a compression algorithm for IPComp. calgo [R] is either deflate or
Algorithm.
If -R is specified, the SPI field value is used as the IPComp compression parameter index
(CPI) on wire as-is. If -R is not specified, the kernel uses well-known CPI on wire, and the
SPI field is used only as an index for kernel-internal usage.
key
Must be a double-quoted character string or a series of hexadecimal digits preceded by
0x.
-unload
Used with the sa -delete -manual command. This is an optional parameter; if it is specified,
the SA is unloaded from the SAD. The command prompts for confirmation to unload the SA
from the SAD.
-restart
Used with the sa -add and sa -delete commands. This is an optional parameter; if it is
specified, the racoon daemon is restarted so that the newest racoon.conf is loaded.
NOTE: The restart of the racoon daemon leads to the disconnection of the SAs already loaded
into the SAD. A new connection established thereafter loads the SA into the SAD. You are
prompted for confirmation to restart the racoon daemon.
-force
Used with -unload or -restart to cause the command to bypass user confirmation.
-obeyform
Displays the security association configuration in the format of add command(s).
ERROR MESSAGES
For sa -add and sa -add -manual:
Please give the correct options. (The incorrect options are displayed.)
For sa -delete and sa -delete -manual:
Please give the correct options. (The incorrect option is displayed.)
The security association for the matched options is not found.
For sa -info:
There are no security associations with the matched options.
For sa -stop:
SA configuration(s) not unloaded from the SAD.
CONSIDERATIONS
For sa -info, if no options are specified, all the security associations in the configuration files
ipsec-tools.conf and racoon.conf are listed.
For sa -stop:
365