IPsec for OSPFv3 configuration

IPsec authentication can be enabled on both default and nondefault VRFs. IPsec authentication is disabled by default.

The following IPsec parameters are configurable:

  • ESP protocol
  • Authentication
  • Hashed Message Authentication Code-Secure Hash Algorithm 1 (HMAC-SHA-1) authentication algorithm
  • Security parameter index (SPI)
  • A 40-character key using hexadecimal characters
  • An option for not encrypting the keyword when it appears in show command output
  • Key rollover timer
  • Specifying the key add remove timer
Note: ICX 7150 devices do not support VRFs.
Parent topic: IPsec for OSPFv3