H3C Technologies H3C S6300 Series Switches User Manual

Page 260

245

[SwitchB] interface vlan-interface 100

[SwitchB-Vlan-interface100] ripng 1 enable

[SwitchB-Vlan-interface100] quit

# Create and configure the IPsec transform set named tran1.

[SwitchB] ipsec transform-set tran1

[SwitchB-ipsec-transform-set-tran1] encapsulation-mode transport

[SwitchB-ipsec-transform-set-tran1] protocol esp

[SwitchB-ipsec-transform-set-tran1] esp encryption-algorithm aes-cbc-128

[SwitchB-ipsec-transform-set-tran1] esp authentication-algorithm sha1

[SwitchB-ipsec-transform-set-tran1] quit

# Create and configure the IPsec profile named profile001.

[SwitchB] ipsec profile profile001 manual

[SwitchB-ipsec-profile-profile001] transform-set tran1

[SwitchB-ipsec-profile-profile001] sa spi outbound esp 123456

[SwitchB-ipsec-profile-profile001] sa spi inbound esp 123456

[SwitchB-ipsec-profile-profile001] sa string-key outbound esp simple abcdefg

[SwitchB-ipsec-profile-profile001] sa string-key inbound esp simple abcdefg

[SwitchB-ipsec-profile-profile001] quit

# Apply the IPsec profile to RIPng process 1.

[SwitchB] ripng 1

[SwitchB-ripng-1] enable ipsec-profile profile001

[SwitchB-ripng-1] quit

Configure Switch C:
# Configure IPv6 addresses for interfaces. (Details not shown.)
# Configure basic RIPng.

system-view

[SwitchC] ripng 1

[SwitchC-ripng-1] quit

[SwitchC] interface vlan-interface 200

[SwitchC-Vlan-interface200] ripng 1 enable

[SwitchC-Vlan-interface200] quit

# Create and configure the IPsec transform set named tran1.

[SwitchC] ipsec transform-set tran1

[SwitchC-ipsec-transform-set-tran1] encapsulation-mode transport

[SwitchC-ipsec-transform-set-tran1] protocol esp

[SwitchC-ipsec-transform-set-tran1] esp encryption-algorithm aes-cbc-128

[SwitchC-ipsec-transform-set-tran1] esp authentication-algorithm sha1

[SwitchC-ipsec-transform-set-tran1] quit

# Create and configure the IPsec profile named profile001.

[SwitchC] ipsec profile profile001 manual

[SwitchC-ipsec-profile-profile001] transform-set tran1

[SwitchC-ipsec-profile-profile001] sa spi outbound esp 123456

[SwitchC-ipsec-profile-profile001] sa spi inbound esp 123456

[SwitchC-ipsec-profile-profile001] sa string-key outbound esp simple abcdefg

[SwitchC-ipsec-profile-profile001] sa string-key inbound esp simple abcdefg

[SwitchC-ipsec-profile-profile001] quit

This manual is related to the following products: