Enabling OSPFv3 IPsec

Procedure

• Enable IPsec in an OSPFv3 process.
  1. Run system-view

     The system view is displayed.

  2. Run ospfv3 [ process-id ]

     The OSPFv3 view is displayed.

  3. Run ipsec sa sa-name

     An SA is configured in the OSPFv3 process.

     An OSPFv3 process can be associated with multiple OSPFv3 areas. An SA applied in the OSPFv3 process can be used in the associated areas.

  4. Run commit

     The configuration is committed.

• Enable IPsec in an OSPFv3 area.
  1. Run system-view

     The system view is displayed.

  2. Run ospfv3 [ process-id ]

     The OSPFv3 view is displayed.

  3. Run area area-id

     The OSPFv3 area view is displayed.

  4. Run ipsec sa sa-name

     An SA is configured in the OSPFv3 area.

     

     The SA configured on an OSPFv3 area takes precedence over that configured in an OSPFv3 process.

  5. Run commit

     The configuration is committed.

• Enable IPsec in an OSPFv3 area.
  1. Run system-view

     The system view is displayed.

  2. Run interface interface-type interface-number

     The interface view is displayed.

  3. Run ospfv3 ipsec sa sa-name

     An SA in the view of an OSPFv3 interface is configured.

     

     • The SA configured in the interface view takes precedence over that configured in the OSPFv3 area view or the OSPFv3 process view.
     • The ospfv3 ipsec sa command can be used on all the OSPFv3 instances of an interface.

  4. Run commit

     The configuration is committed.