R0106-HP MSR Router Series Layer 3 - IP Routing Configuration Guide(V7)

437

[RouterC-ipsec-profile-profile002-manual] sa spi outbound ah 400000

# Configure the inbound and outbound SPIs for ESP.

[RouterC-ipsec-profile-profile002-manual] sa spi inbound esp 256

[RouterC-ipsec-profile-profile002-manual] sa spi outbound esp 256

# Configure the inbound and outbound SA keys for AH.

[RouterC-ipsec-profile-profile002-manual] sa string-key inbound ah simple hello

[RouterC-ipsec-profile-profile002-manual] sa string-key outbound ah simple hello

# Configure the inbound and outbound SA keys for ESP.

[RouterC-ipsec-profile-profile002-manual] sa string-key inbound esp simple byebye

[RouterC-ipsec-profile-profile002-manual] sa string-key outbound esp simple

byebye

[RouterC-ipsec-profile-profile002-manual] quit

4. Apply the IPsec profiles to areas:

# Configure Router A.

[RouterA] ospfv3 1

[RouterA-ospfv3-1] area 1

[RouterA-ospfv3-1-area-0.0.0.1] enable ipsec-profile profile001

[RouterA-ospfv3-1-area-0.0.0.1] quit

[RouterA-ospfv3-1] quit

# Configure Router B.

[RouterB] ospfv3 1

[RouterB-ospfv3-1] area 0

[RouterB-ospfv3-1-area-0.0.0.0] enable ipsec-profile profile002

[RouterB-ospfv3-1-area-0.0.0.0] quit

[RouterB-ospfv3-1] area 1

[RouterB-ospfv3-1-area-0.0.0.1] enable ipsec-profile profile001

[RouterB-ospfv3-1-area-0.0.0.1] quit

[RouterB-ospfv3-1] quit

# Configure Router C.

[RouterC] ospfv3 1

[RouterC-ospfv3-1] area 0

[RouterC-ospfv3-1-area-0.0.0.0] enable ipsec-profile profile002

[RouterC-ospfv3-1-area-0.0.0.0] quit

[RouterC-ospfv3-1] quit

Verifying the configuration

OSPFv3 packets between Routers A, B, and C are protected by IPsec.