
Configuring IPsec Services
C-10
304111-B Rev 00
SA Example 1: Configuring a Single Protect/Unprotect SA Pair
In this example, a single Protect/Unprotect SA pair is configured using DES
encryption. Both ends of the SA pair use the same cipher algorithm, cipher key,
and integrity key (see Figure C-3
).
RTR1 Protect SA RTR2 Unprotect SA
IP source address 119.68.12.1 119.68.12.1
IP destination
address
189.132.10.1 189.132.10.1
Security parameter
index (SPI)
256 256
Cipher key length DES56 DES56
Cipher key 0x0101230405060708 0x0101230405060708
Integrity algorithm HMAC MD5 HMAC MD5
Integrity key 0x010123040506070890a0
b0c0d0e0f11
0x010123040506070890a0
b0c0d0e0f11
RTR1 Unprotect SA RTR2 Protect SA
IP source address 189.132.10.1 189.132.10.1
IP destination
address
119.68.12.1 119.68.12.1
Security parameter
index (SPI)
256 256
Cipher key length DES56 DES56
Cipher key 0x0101230405060708 0x0101230405060708
Integrity algorithm HMAC MD5 HMAC MD5
Integrity key 0x010123040506070890a0
b0c0d0e0f11
0x010123040506070890a0
b0c0d0e0f11
Comentarios a estos manuales