Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

To configure, remove, or display IPsec authentication on an interface, use the following commands.

• Enable IPsec authentication for OSPFv3 packets on an IPv6-based interface. INTERFACE mode ipv6 ospf authentication {null | ipsec spi number {MD5 | SHA1} [ key-encryption-type] key}
  • null: causes an authentication policy configured for the area to not be inherited on the interface.
  • ipsec spi number : the security policy index (SPI) value. The range is from 256 to 4294967295.
  • MD5 | SHA1: specifies the authentication type: Message Digest 5 ( MD5) or Secure Hash Algorithm 1 ( SHA-1).
  • key-encryption-type : (optional) specifies if the key is encrypted. The valid values are 0 (key is not encrypted) or 7 (key is encrypted).
  • key: specifies the text string used in authentication. All neighboring OSPFv3 routers must share key to exchange information. For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted).
• Remove an IPsec authentication policy from an interface. no ipv6 ospf authentication ipsec spi number
• Remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area. no ipv6 ospf authentication null
• Display the configuration of IPsec authentication policies on the router. show crypto ipsec policy
• Display the security associations set up for OSPFv3 interfaces in authentication policies. show crypto ipsec sa ipv6