HP StorageWorks Enterprise File Services WAN Accelerator 2.1 Command Line Interface Reference Guide (November 2005)

98 4 - CONFIGURATION-MODE COMMANDS
Parameters
Example
minna (config) # ip security authentication policy hmac_md5
minna (config) #
ip security enable
Description Enables encryption and authentication support using the IP Security Protocol (IPsec).
Enabling IPsec support makes it difficult for a third party to view your data or pose as
a machine you expect to receive data from. You must also specify a shared secret to
enable IPsec support.
IMPORTANT: You must set IPsec support on each HP EFS WAN Accelerator with which you
want to establish a secure connection.
NOTE: To enable IPsec authentication you must have at least one encryption and authentication
algorithm specified.
Syntax ip security enable
Parameters None
minna (config) # ip security enable
minna (config) #
ip security encryption policy
Description Sets the encryption algorithms in order of priority. You must specify at least one
algorithm. The algorithm is used to encrypt each packet sent using IPsec.
Syntax ip security encryption policy <algorithm> [<algorithm>]
<policy> Specifies the primary policy (method 1):
•hmac_md5. Message-Digest algorithm 5 (MD5) is a widely-used
cryptographic hash function with a 128-bit hash value. The
default value is hmac_md5.
• hmac_sha1.
Secure Hash Algorithm (SHA1) is a set of related
cryptographic hash functions. SHA-1 is considered to be the
successor to MD5.
<policy> Specifies the secondary policy (method 2): hmac_md5,
hmac_sha1.