No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - IP Unicast Routing

S1720, S2700, S5700, and S6720 V200R011C10

This document describes IP Unicast Routing configurations supported by the switch, including the principle and configuration procedures of IP Routing Overview, Static Route, RIP, RIPng, OSPF, OSPFv3, IS-IS(IPv4), IS-IS(IPv6), BGP, Routing Policy ,and PBR, and provides configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring RIPng IPSec Authentication

Configuring RIPng IPSec Authentication

Context

As networks develop rapidly, network security has become a major concern. If IPSec authentication is configured on a RIPng network, the sent and received RIPng packets will be authenticated, and those cannot pass authentication will be discarded. This can improve the security of the RIPng network.

There are two methods of configuring IPSec authentication for RIPng:
  • One method is to configure IPSec authentication in RIPng processes. If IPSec authentication is enabled in a RIPng process, this configuration takes effect on all interfaces in this RIPng process. This method is recommended if IPSec authentication needs to be applied to all interfaces in a RIPng process.

  • The other method is to configure IPSec authentication on RIPng interfaces. This method is recommended if IPSec authentication needs to be applied only to some interfaces in a RIPng process.

Procedure

  • Configuring IPSec authentication in a RIPng process.
    1. Run system-view

      The system view is displayed.

    2. Run ripng [ process-id ]

      The RIPng view is displayed.

    3. Run ipsec sa sa-name

      IPSec authentication is enabled, and the name of an SA is specified.

      By default, IPSec authentication is disabled in a RIPng process.

  • Configuring IPSec authentication on a RIPng interface.
    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. (Optional) On an Ethernet interface, run undo portswitch

      The interface is switched to Layer 3 mode.

      By default, an Ethernet interface works in Layer 2 mode.
      NOTE:

      Only the S5720HI, S5720EI, S6720EI, and S6720S-EI support switching between Layer 2 and Layer 3 modes.

    4. Run ripng ipsec sa sa-name

      IPSec authentication is enabled on the interface, and the name of an SA is specified.

      By default, IPSec authentication is disabled on a RIPng interface.

      NOTE:

      The ripng ipsec sa command takes precedence over the ipsec sa command. If both commands are run in respective views and different SA names are specified, only the configuration of the ripng ipsec sa command takes effect.

Translation
Download
Updated: 2019-10-21

Document ID: EDOC1000178171

Views: 317671

Downloads: 1117

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next