Manualshelf

White Papers

ManualsBrandsDell ManualsConverged InfrastructureGeneral Solution Resources
9101112131415161718
16
|
QAT Whitepaper
© 2019 Dell Inc. or its subsidiaries.
set interface ip address TwentyFiveGigabitEthernet3b/0/1 10.10.1.1/24
set interface ip address TwentyFiveGigabitEthernet3b/0/0 10.10.2.1/24
set ip arp TwentyFiveGigabitEthernet3b/0/1 10.10.1.2 24:6e:96:9c:e5:df
set ip arp TwentyFiveGigabitEthernet3b/0/0 10.10.2.2 24:6e:96:9c:e5:de
ipsec spd add 1
ipsec spd add 2
set interface ipsec spd TwentyFiveGigabitEthernet3b/0/1 1
set interface ipsec spd TwentyFiveGigabitEthernet3b/0/0 2
set int promiscuous on TwentyFiveGigabitEthernet3b/0/1
set int promiscuous on TwentyFiveGigabitEthernet3b/0/0
ipsec sa add 10 spi 1000 esp tunnel-src 10.10.2.1 tunnel-dst 10.10.2.2 crypto-key 4339314b55523947594d6d35476
66b45 crypto-alg aes-cbc-128 integ-key 4339314b55523947594d6d3547666b45 integ-alg sha1-96
ipsec policy add spd 1 outbound priority 100 action protect sa 10 remote-ip-range 16.0.0.0-16.255.255.255
ipsec sa add 11 spi 1001 esp tunnel-src 10.10.1.1 tunnel-dst 10.10.1.2 crypto-key 4339314b55523947594d6d35476
66b45 crypto-alg aes-cbc-128 integ-key 4339314b55523947594d6d3547666b45 integ-alg sha1-96
ipsec policy add spd 2 outbound priority 100 action protect sa 11 remote-ip-range 48.0.0.0-48.255.255.255
ipsec policy add spd 1 outbound priority 90 protocol 50 action bypass
ipsec policy add spd 2 outbound priority 90 protocol 50 action bypass
ip route add 16.0.0.0/8 via 10.10.1.2 TwentyFiveGigabitEthernet3b/0/1
ip route add 48.0.0.0/8 via 10.10.2.2 TwentyFiveGigabitEthernet3b/0/0
set interface state TwentyFiveGigabitEthernet3b/0/1 up
set interface state TwentyFiveGigabitEthernet3b/0/0 up
6.8 VPP Common IPSec Configuration for OpenSSL/AESNI/Intel
®
QAT