H3C LSW1FC4P0 Interface Card for S5820X-28C Ethernet Switches Command Line Interface Guide Firmware Version 9.0.7

Command Reference
Ipsec Association
59272-00 C 171
Ipsec Association
Creates and manages associations in the Security Association database.
Authority Admin session and an Ipsec Edit session
Syntax ipsec association
copy [association_source] [association_destination]
create [association]
delete [association]
edit [association]
list [association]
rename [association_old] [association_new]
Keywords copy [association_source] [association_destination]
Creates a new association named [association_destination] and copies the
configuration into it from the association given by [association_source].
[association_destination] must not begin with DynamicSA_, which is reserved for
dynamic associations. You must enter the Ipsec Save command afterwards to
save your changes.
create [association]
Creates an association with the name given by [association]. An association name
must begin with a letter and be no longer than 32 characters. Valid characters are
0-9, A-Z, a-z, _, $, ^, and -. The Security Association database supports a
maximum of 512 user-defined associations. You must enter the Ipsec Save
command afterwards to save your changes. The association configuration
parameters are described in Table 7.
Table 7. Association Configuration Parameters
Parameter Description
Description Description of the association.
SourceAddress IP address or DNS host name of the host, switch, or
gateway from which data originates.
DestinationAddress IP address or DNS host name of the host, switch, or
gateway receiving data. If you specified an IP
address for the SourceAddress, the DestinationAd-
dress must use the same IP version format.