group-encryption commands

configure 
   —  group-encryption 
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  encryption-keygroup number 
         —  active-outbound-security-association reference
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  authentication-algorithm keyword
         —  description description
         —  encryption-algorithm keyword
         —  keygroup-name named-item-64-or-empty
         —  security-association number 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication-key encrypted-leaf-hex
            —  encryption-key encrypted-leaf-hex
      —  group-encryption-label number

group-encryption command descriptions

group-encryption


	Synopsis	Enter the group-encryption context
	Context	configure group-encryption
	Tree	group-encryption
	Introduced	25.3.R2
	Platforms	SAR Gen 2

encryption-keygroup [id] number


	Synopsis	Enter the encryption-keygroup list instance
	Context	configure group-encryption encryption-keygroup number
	Tree	encryption-keygroup
	Max. instances	127
	Introduced	25.3.R2
	Platforms	SAR Gen 2

[id] number


	Synopsis	Encryption key group ID
	Context	configure group-encryption encryption-keygroup number
	Tree	encryption-keygroup
	Range	1 to 127
	Notes	This element is part of a list key.
	Introduced	25.3.R2
	Platforms	SAR Gen 2

active-outbound-security-association reference


	Synopsis	SPI to use for egressing packets for the key group
	Context	configure group-encryption encryption-keygroup number active-outbound-security-association reference
	Tree	active-outbound-security-association
	Reference	configure group-encryption encryption-keygroup number security-association number
	Introduced	25.3.R2
	Platforms	SAR Gen 2

authentication-algorithm keyword


Warning: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Hashing algorithm used for the authentication function
	Context	configure group-encryption encryption-keygroup number authentication-algorithm keyword
	Tree	authentication-algorithm
	Options	sha256, sha512
	Default	sha256
	Introduced	25.3.R2
	Platforms	SAR Gen 2

description description


	Synopsis	Text description
	Context	configure group-encryption encryption-keygroup number description description
	Tree	description
	String length	1 to 80
	String format	'string-not-all-spaces' must contain at least one non-space character
	Introduced	25.3.R2
	Platforms	SAR Gen 2

encryption-algorithm keyword


Warning: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Encryption algorithm for encryption on ESP
	Context	configure group-encryption encryption-keygroup number encryption-algorithm keyword
	Tree	encryption-algorithm
	Options	aes128, aes256
	Default	aes128
	Introduced	25.3.R2
	Platforms	SAR Gen 2

keygroup-name named-item-64-or-empty


	Synopsis	Key group name
	Context	configure group-encryption encryption-keygroup number keygroup-name named-item-64-or-empty
	Tree	keygroup-name
	String length	0 to 64
	String format	'string-not-all-spaces' must contain at least one non-space character
	Introduced	25.3.R2
	Platforms	SAR Gen 2

security-association [security-parameter-index] number


	Synopsis	Enter the security-association list instance
	Context	configure group-encryption encryption-keygroup number security-association number
	Tree	security-association
	Max. instances	4
	Introduced	25.3.R2
	Platforms	SAR Gen 2

[security-parameter-index] number


	Synopsis	Security Parameter Index (SPI)
	Context	configure group-encryption encryption-keygroup number security-association number
	Tree	security-association
	Range	1 to 1023
	Notes	This element is part of a list key.
	Introduced	25.3.R2
	Platforms	SAR Gen 2

authentication-key encrypted-leaf-hex


Warning: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Key used for the authentication algorithm
	Context	configure group-encryption encryption-keygroup number security-association number authentication-key encrypted-leaf-hex
	Tree	authentication-key
	Description	This command specifies the key used for the authentication algorithm in a protected format. The specific format is indicated by the hash, hash2, hash3, or custom suffix. See "Configuration secrets" in the 7705 SAR Gen 2 System Management Guide for more information.
	String length	1 to 166
	String format	'encrypted-leaf-hex' must have clear text in hex with prefix 0x or end with hash/hash2/hash3/custom
	Notes	This element is mandatory.
	Introduced	25.3.R2
	Platforms	SAR Gen 2

encryption-key encrypted-leaf-hex


Warning: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Key used for the encryption algorithm
	Context	configure group-encryption encryption-keygroup number security-association number encryption-key encrypted-leaf-hex
	Tree	encryption-key
	Description	This command specifies the key used for the encryption algorithm in a protected format. The specific format is indicated by the hash, hash2, hash3, or custom suffix. See "Configuration secrets" in the 7705 SAR Gen 2 System Management Guide for more information.
	String length	1 to 126
	String format	'encrypted-leaf-hex' must have clear text in hex with prefix 0x or end with hash/hash2/hash3/custom
	Notes	This element is mandatory.
	Introduced	25.3.R2
	Platforms	SAR Gen 2

group-encryption-label number


Warning: Modifying this element recreates the parent element automatically for the new value to take effect.
	Synopsis	Network-wide unique MPLS label for group encryption
	Context	configure group-encryption group-encryption-label number
	Tree	group-encryption-label
	Range	32 to 2047
	Introduced	25.3.R2
	Platforms	SAR Gen 2