Command Reference Guide

3Com Router 5000 Family and Router 6000 Family sa spi ● 269
Command Reference
Description This command is only used for the ipsec policy in manual mode. It is used to set the
SA parameter manually and establish a SA manually.
For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter
manually, and this command is invalid. IKE will automatically negotiate the SA
parameter and establish a SA.
When configuring the SA of manual mode, the SA parameters of inbound and
outbound directions must be set separately.
The SA parameters set at both ends of the security tunnel must be fully matching. The
SPI and key for the SA input at the local end must be the same as those output at the
remote. The SA SPI and key output at the local end must be the same as those input
at the remote.
Related Commands ■ ipsec policy (Interface view)
■ ipsec policy (System view)
■ proposal
■ sa duration
■ security acl
■ tunnel local
■ tunnel remote