ospfv3 ipsec sa

Function

The ospfv3 ipsec sa command configures an SA on an OSPFv3 interface.

The undo ospfv3 ipsec sa command deletes the SA configured on an OSPFv3 interface.

By default, no SA is configured on an OSPFv3 interface.

Format

ospfv3 ipsec sa saName

undo ospfv3 ipsec sa

Parameters

Parameter	Description	Value
saName	Specifies the name of an SA.	The value is a string of 1 to 15 case-sensitive characters.

Parameter

Description

Value

saName

Specifies the name of an SA.

The value is a string of 1 to 15 case-sensitive characters.

Views

100GE interface view, 10GE interface view, 25GE sub-interface view, 25GE interface view, 400GE interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk interface view, FlexE interface view, GE optical interface view, GE electrical interface view, Global VE sub-interface view, VBDIF interface view, VE sub-interface view, VLANIF interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ospf	write

Usage Guidelines

Usage Scenario

If an SA is configured on an interface, OSPFv3 uses the SA to authenticate packets sent and received by the interface.

If no SA is configured on the interface or the configured SA is deleted from the interface, OSPFv3 uses the SA configured in the process or area where the interface resides to authenticate packets sent and received by the interface.

NOTE:

The SA configured in the interface view takes precedence over that configured in the OSPFv3 area or process view.
The ospfv3 ipsec sa command can be used on all the OSPFv3 instances of an interface.

Example

# Configure an SA in the interface view.

<HUAWEI> system-view
[~HUAWEI] ipsec sa sa3
[*HUAWEI-ipsec-sa-sa3] quit
[*HUAWEI] ospfv3 1
[*HUAWEI-ospfv3-1] quit
[*HUAWEI] interface GigabitEthernet 0/1/0
[*HUAWEI-GigabitEthernet0/1/0] ipv6 enable
[*HUAWEI-GigabitEthernet0/1/0] ospfv3 1 area 0
[*HUAWEI-GigabitEthernet 0/1/0] ospfv3 ipsec sa sa3