Configuring an IPsec Proposal

Procedure

1. Run system-view

   The system view is displayed.

2. Run ipsec proposal proposal-name

   A security proposal is created and the security proposal view is displayed.

3. Run encapsulation-mode transport

   The protocol packet encapsulation mode is configured.

4. (Optional) Run transform { ah | ah-esp | esp }

   A security protocol is configured.

5. An authentication algorithm and an encryption algorithm are configured based on the selected security protocol.

   • If Authentication Header (AH) is configured, run the ah authentication-algorithm { md5 | sha1 | sha2-256 | sha2-384 | sha2-512 } command to configure an authentication algorithm.

     

     To help provide high security, do not use the MD5 or SHA1 algorithm as an AH authentication algorithm.

   • If ESP is configured, run the esp authentication-algorithm { md5 | sha1 | sha2-256 | sha2-384 | sha2-512 } command to configure an authentication algorithm.

     

     To help provide high security, do not use the MD5 or SHA1 algorithm as an ESP authentication algorithm.

   • If ESP is configured, run the esp encryption-algorithm { des | 3des | aes { 128 | 192 | 256 } } command to configure an ESP encryption algorithm.

     

     To help provide high security, do not use the DES or 3DES algorithm as an ESP encryption algorithm.

6. Run commit

   The configuration is committed.