Navigation
Configuring Minimum Manual Security Associations for IPsec on an ES PIC
To define a manual security association (SA) configuration for an ES PIC, include at least the following statements at the [edit security ipsec] hierarchy level:
[edit security ipsec]
security-association sa-name {manual {direction (inbound | outbound | bidirectional) {authentication {algorithm (hmac-md5-96 | hmac-sha1-96); key (ascii-text key | hexadecimal key);}encryption {algorithm (des-cbc | 3des-cbc);key (ascii-text key | hexadecimal key);}protocol (ah | esp | bundle);spi spi-value;}}}