HP TippingPoint Next Generation Firewall Series Guía de usuario descargar pdf (Pagina 191)

NGFW Command Line Interface Reference 183

delete sa esp ((A.B.C.D|X:X::X:X) SPI)

Valid entries:

sa Configure Security Association

esp Delete ESP Security Associations

all Delete all ESP Security Associations

(A.B.C.D|X:X::X:X) Security Association remote address

SPI Security Parameter Index

Example

NGFW{running-manual-sa}delete sa esp 192.168.2.2 1

NGFW{running-manual-sa}sa

Configure Security Association.

Syntax

sa esp (A.B.C.D A.B.C.D) SPI MODE ((CRYPTALGO CRYPTKEY)|null) AUTHALGO AUTHKEY

sa esp (X:X::X:X X:X::X:X) SPI MODE ((CRYPTALGO CRYPTKEY)|null) AUTHALGO AUTHKEY

sa esp (A.B.C.D A.B.C.D) (1-4294967295) (tunnel|transport) ((3des-cbc

CRYPTKEY)|(aes-cbc CRYPTKEY)|null) (hmac-md5 AUTHKEY|hmac-sha1 AUTHKEY)

sa esp (X:X::X:X X:X::X:X) (1-4294967295) (tunnel|transport) ((3des-cbc

CRYPTKEY)|(aes-cbc CRYPTKEY)|null) (hmac-md5 AUTHKEY|hmac-sha1 AUTHKEY)

Valid entries:

esp ESP security association

A.B.C.D Security Association source IPv4 address

A.B.C.D Security Association destination IPv4 address

X:X::X:X Security Association source IPv6 address

X:X::X:X Security Association destination IPv6 address

SPI Security Parameter Index from 1 to 2^32-1 (e.g. 0x1 or 1 to 0xffffffff or

4294967295)

MODE IPsec processing mode

Possible values for MODE are:

tunnel Tunnel mode

transport Transport mode

CRYPTALGO IPsec encryption algorithm

Possible values for CRYPTALGO are:

3des-cbc Triple DES

aes-cbc AES

CRYPTKEY Encryption key

format: ASCII string ("abcdefgh1234#=+...")

hexadecimal value (0x123456789abcdef0)

192 bits (24 bytes) for 3des-cbc

128/192/256 bits (16/24/32 bytes) for aes-cbc

null ESP_NULL encryption (RFC2410)

AUTHALGO IPsec authentication algorithm

Possible values for AUTHALGO are:

hmac-md5 HMAC-MD5

hmac-sha1 HMAC-SHA1

AUTHKEY Authentication/integrity key

format: ASCII string ("abcdefgh1234#=+...")

hexadecimal value (0x123456789abcdef0)

length: 128 bits (16 bytes) for hmac-md5

160 bits (20 bytes) for hmac-sha1

Example

NGFW{running-manual-sa}sa esp 192.168.1.1 192.168.2.2 1 tunnel aes-cbc

0x4d7acaf0c08349ebbcbd86a2093eadf69786537755fc3ea23835c2d71450fdf5 hmac-sha1

0x6a4a71232e102e404979f8edef925a51b1ac098d

1 2 ... 186 187 188 189 190 191 192 193 194 195 196 ... 251 252

Comentarios a estos manuales

Sin comentarios

HP TippingPoint Next Generation Firewall Series Guía de usuario Pagina 191

Comentarios a estos manuales

Relacionado con productos y manuales para Redes HP TippingPoint Next Generation Firewall Series