TMS zl Management and Configuration Guide ST.1.1.100226

A-81

Command-Line Reference

Global Configuration Context

ipsec proposal

To create or edit an IPsec proposal, enter the following command from the

global configuration context:

Syntax: ipsec proposal <proposal name> encapsulation <tunnel | transport> security

<esp encryption <encryption protocol> auth <authentication protocol> | ah auth

Replace <proposal name> with the unique name of the proposal you are

creating or editing (1–32 alphanumeric characters). If the name already exists,

this command will edit that policy. If the name is new, this command will create

a new proposal.

Replace <encryption protocol> with one of the following encryption proto-

cols:

■ des

■ 3des

■ aes-128

■ aes-192

■ aes-256

■ null

Replace <authentication protocol> with one of the following authentication

protocols:

■ md5

■ sha-1

■ aes-xcbc

■ none

Note, however, that you must select either an authentication or encryption

protocol. You cannot configure none for the authentication protocol if null is

selected for the encryption protocol.

For example:

ProCurve(tms-module-<slot ID>:config)# ipsec proposal

testprop encapsulation tunnel security esp encryption des

auth md5

Success: The IPsec proposal was added successfully.