R2511-HP MSR Router Series Security Command Reference(V5)

227
Default command level
2: System level
Parameters
tag-value: Sets a route tag for the static routes, in the range of 1 to 4294967295.
Usage guidelines
This command makes sense only when used together with the reverse-route command.
When you change the route tag, static IPsec RRI deletes all static routes it has created and creates new
static routes. In contrast, dynamic IPsec RRI applies the new route tag only to subsequent static routes. It
does not delete or modify static routes it has created.
For information about routing policies, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the tag value to 50 for the static routes created by IPsec RRI.
<Sysname>system-view
[Sysname] ipsec policy 1 1 isakmp
[Sysname-ipsec-policy-isakmp-1-1] reverse-route tag 50
Related commands
reverse-route
sa authentication-hex
Use sa authentication-hex to configure an authentication key for an SA.
Use undo sa authentication-hex to remove the configuration.
Syntax
sa authentication-hex { inbound | outbound } { ah | esp } [ cipher | simple ] hex-key
undo sa authentication-hex { inbound | outbound } { ah | esp }
Views
IPsec policy view
Default command level
2: System level
Parameters
inbound: Specifies the inbound SA through which IPsec processes the received packets.
outbound: Specifies the outbound SA through which IPsec processes the packets to be sent.
ah: Uses AH.
esp: Uses ESP.
cipher: Sets a ciphertext authentication key.
simple: Sets a plaintext authentication key.
hex-key: Specifies the key string. If cipher is specified, this argument is case sensitive and must be a
ciphertext string of 1 to 117 cha rac t e rs. I f simple is specified, this argument is case insensitive and must
be a 16-byte hexadecimal string for MD5, a 20-byte hexadecimal string for SHA1, 32-byte hexadecimal