TMS zl Management and Configuration Guide ST.1.2.100916

Replace <authentication protocol> with one of the following authentication
protocols:
■ md5
■ sha-1
■ aes-xcbc
■ none
Note, however, that you must select either an authentication or encryption
protocol. You cannot configure none for the authentication protocol if null is
selected for the encryption protocol.
For example:
hostswitch(tms-module-<slot ID>:config)# ipsec proposal
testprop encapsulation tunnel security esp encryption des
auth md5
Success: The IPsec proposal was added successfully.
To delete an IPsec proposal, enter the following:
Syntax: no ipsec proposal <proposal name>
Replace <proposal name> with the name of the IPsec proposal that you want
to delete.
ipsec policy
To create or edit (or delete) an IPsec policy, enter the following command:
Syntax: [no] ipsec policy <policy name>
Replace <policy name> with the unique name of the policy you are creating
or editing (1–32 alphanumeric characters).
After entering this command, you will be moved to the CLI’s IPsec context.
See “IPsec Policy Context” on page A-131.
ipsec sa
Use this command to control auto SA revalidation and the maximum number
of SA per IPsec policy.