Network Configuration
Managing IP Security
59270-00 A
3-15
A
Creating an Association
To create an association, enter the
Ipsec Association
Create command as shown
in the following example:
SANbox #> admin start
SANbox (admin) #> ipsec edit
SANbox (admin-ipsec) #> ipsec association create h2h-sh-sa
A list of attributes with formatting will follow.
Enter a value or simply press the ENTER key to skip specifying a value.
If you wish to terminate this process before reaching the end of the list
press 'q' or 'Q' and the ENTER key to do so.
Required attributes are preceded by an asterisk.
Value (press ENTER to not specify value, 'q' to quit):
Description (string value, 0-127 bytes) : Host-to-host: switch->host
*SourceAddress (hostname, IPv4, or IPv6 Address) : fe80::2c0:ddff:fe03:d4c1
*DestinationAddress (hostname, IPv4, or IPv6 Address) : fe80::250:daff:feb7:9d02
*Protocol (1=esp, 2=esp-old, 3=ah, 4=ah-old) : 1
*SPI (decimal value, 256-4294967295) : 333
Authentication (select an authentication algorithm)
1=hmac-md5 (16 byte key)
2=hmac-sha1 (20 byte key)
3=hmac-sha256 (32 byte key)
4=aes-xcbc-mac (16 byte key)
authentication algorithm choice : 2
*AuthenticationKey (quoted string or raw hex bytes) : "12345678901234567890"
*Encryption (select an encryption algorithm)
1=des-cbc (8 byte key)
2=3des-cbc (24 byte key)
3=null (0 byte key)
4=blowfish-cbc (5-56 byte key)
5=aes-cbc (16/24/32 byte key)
6=twofish-cbc (16-32 byte key)
encryption algorithm choice : 2
*EncryptionKey (quoted string or raw hex bytes) : "123456789012345678901234"
The security association has been created.
This configuration must be saved with the 'ipsec save' command
before it can take effect, or to discard this configuration
use the 'ipsec cancel' command.
Summary of Contents for SANbox 3810
Page 1: ...59270 00 A SANbox 3810 Fibre Channel Switch Command Line Interface Guide Firmware Version 7 4...
Page 16: ...Preface Technical Support xvi 59270 00 A S Notes...
Page 26: ...Command Line Interface Usage Downloading and Uploading Files 1 10 59270 00 A S Notes...
Page 50: ...Network Configuration Managing IP Security 3 20 59270 00 A S Notes...
Page 116: ...Connection Security Configuration Creating an SSL Security Certificate 7 4 59270 00 A S Notes...
Page 142: ...Event Log Configuration Creating and Downloading a Log File 10 8 59270 00 A S Notes...
Page 160: ...Call Home Configuration Resetting the Call Home Database 11 18 59270 00 A S Notes...
Page 380: ...Command Reference Zoning Save 13 212 59270 00 A S Notes...
Page 394: ...SANbox 3810 Fibre Channel Switch Command Line Interface Guide Index 14 59270 00 A S Notes...
Page 395: ......