R0106-HP MSR Router Series Layer 3 - IP Routing Configuration Guide(V7)

ManualsBrandsHP ManualsNetwork HardwareHP MSR3024 TAA-compliant AC Router

441

442

443

444

445

446

447

448

449

450

436

# Configure the inbound and outbound SPIs for ESP.

[RouterB-ipsec-profile-profile001-manual] sa spi inbound esp 200000

[RouterB-ipsec-profile-profile001-manual] sa spi outbound esp 200000

# Configure the inbound and outbound SA keys for AH.

[RouterB-ipsec-profile-profile001-manual] sa string-key inbound ah simple abc

[RouterB-ipsec-profile-profile001-manual] sa string-key outbound ah simple abc

# Configure the inbound and outbound SA keys for ESP.

[RouterB-ipsec-profile-profile001-manual] sa string-key inbound esp simple 123

[RouterB-ipsec-profile-profile001-manual] sa string-key outbound esp simple 123

[RouterB-ipsec-profile-profile001-manual] quit

# Create a manual IPsec profile named profile002.

[RouterB] ipsec profile profile002 manual

# Reference IPsec transform set trans.

[RouterB-ipsec-profile-profile002-manual] transform-set trans

# Configure the inbound and outbound SPIs for AH.

[RouterB-ipsec-profile-profile002-manual] sa spi inbound ah 400000

[RouterB-ipsec-profile-profile002-manual] sa spi outbound ah 400000

# Configure the inbound and outbound SPIs for ESP.

[RouterB-ipsec-profile-profile002-manual] sa spi inbound esp 256

[RouterB-ipsec-profile-profile002-manual] sa spi outbound esp 256

# Configure the inbound and outbound SA keys for AH.

[RouterB-ipsec-profile-profile002-manual] sa string-key inbound ah simple hello

[RouterB-ipsec-profile-profile002-manual] sa string-key outbound ah simple hello

# Configure the inbound and outbound SA keys for ESP.

[RouterB-ipsec-profile-profile002-manual] sa string-key inbound esp simple byebye

[RouterB-ipsec-profile-profile002-manual] sa string-key outbound esp simple

byebye

[RouterB-ipsec-profile-profile002-manual] quit

{ On Router C:

# Create an IPsec transform set named trans.

[RouterC] ipsec transform-set trans

# Specify the encapsulation mode as transport.

[RouterC-ipsec-transform-set-trans] encapsulation-mode transport

# Specify the ESP encryption and authentication algorithms.

[RouterC-ipsec-transform-set-trans] esp encryption-algorithm 3des-cbc

[RouterC-ipsec-transform-set-trans] esp authentication-algorithm md5

# Specify the AH authentication algorithm.

[RouterC-ipsec-transform-set-trans] ah authentication-algorithm md5

[RouterC-ipsec-transform-set-trans] quit

# Create a manual IPsec profile named profile002.

[RouterC] ipsec profile profile002 manual

# Reference IPsec transform set trans.

[RouterC-ipsec-profile-profile002-manual] transform-set trans

# Configure the inbound and outbound SPIs for AH.

[RouterC-ipsec-profile-profile002-manual] sa spi inbound ah 400000