anysec commands
configure
— anysec
— apply-groups reference
— apply-groups-exclude reference
— mka-over-ip
— mka-udp-port number
— reserved-label-block reference
— tunnel-encryption
— encryption-group string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— ca-name reference
— encryption-label number
— peer (ipv4-address-no-zone | ipv6-address-no-zone)
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— encryption-label number
— peer-tunnel-attributes
— flex-algo-id number
— igp-instance-id number
— routing-protocol keyword
— security-termination-policy reference
— security-termination-policy string
— admin-state keyword
— apply-groups reference
— apply-groups-exclude reference
— flex-algo-id number
— igp-instance-id number
— local-address (ipv4-address-no-zone | ipv6-address-no-zone)
— routing-protocol keyword
— rx-must-be-encrypted boolean
anysec command descriptions
anysec
mka-over-ip
| Synopsis | Enter the mka-over-ip context | |
| Context | configure anysec mka-over-ip | |
| Tree | mka-over-ip | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
mka-udp-port number
| Synopsis | ANYSec MKA UDP port | |
| Context | configure anysec mka-over-ip mka-udp-port number | |
| Tree | mka-udp-port | |
| Range | 1024 to 49151 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
reserved-label-block reference
| Synopsis | ANYSec reserved label block | |
| Context | configure anysec reserved-label-block reference | |
| Tree | reserved-label-block | |
Reference | configure router string mpls-labels reserved-label-block string | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
tunnel-encryption
| Synopsis | Enter the tunnel-encryption context | |
| Context | configure anysec tunnel-encryption | |
| Tree | tunnel-encryption | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
encryption-group [group-name] string
| Synopsis | Enter the encryption-group list instance | |
| Context | configure anysec tunnel-encryption encryption-group string | |
| Tree | encryption-group | |
| Max. Instances | 512 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
[group-name] string
| Synopsis | ANYSec encryption group name | |
| Context | configure anysec tunnel-encryption encryption-group string | |
| Tree | encryption-group | |
| String Length | 1 to 32 | |
Notes | This element is part of a list key. | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
admin-state keyword
| Synopsis | Enable or disable encryption group | |
| Context | configure anysec tunnel-encryption encryption-group string admin-state keyword | |
| Tree | admin-state | |
| Options | ||
| Default | disable | |
| Introduced | 23.3.R2 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
ca-name reference
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | MACSec connectivity association for encryption group | |
| Context | configure anysec tunnel-encryption encryption-group string ca-name reference | |
| Tree | ca-name | |
Reference | configure macsec connectivity-association string | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
encryption-label number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Label identifying packets sent from the node to peers | |
| Context | configure anysec tunnel-encryption encryption-group string encryption-label number | |
| Tree | encryption-label | |
| Range | 32 to 1048575 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
peer [peer-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
| Synopsis | Enter the peer list instance | |
| Context | configure anysec tunnel-encryption encryption-group string peer (ipv4-address-no-zone | ipv6-address-no-zone) | |
| Tree | peer | |
| Max. Instances | 512 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
[peer-ip-address] (ipv4-address-no-zone | ipv6-address-no-zone)
| Synopsis | Peer IP address | |
| Context | configure anysec tunnel-encryption encryption-group string peer (ipv4-address-no-zone | ipv6-address-no-zone) | |
| Tree | peer | |
Notes | This element is part of a list key. | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
admin-state keyword
| Synopsis | Administrative state of the encryption group peer | |
| Context | configure anysec tunnel-encryption encryption-group string peer (ipv4-address-no-zone | ipv6-address-no-zone) admin-state keyword | |
| Tree | admin-state | |
| Options | ||
| Default | disable | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
encryption-label number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Label identifying packets sent from the peer | |
| Context | configure anysec tunnel-encryption encryption-group string peer (ipv4-address-no-zone | ipv6-address-no-zone) encryption-label number | |
| Tree | encryption-label | |
| Range | 32 to 1048575 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
peer-tunnel-attributes
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Enter the peer-tunnel-attributes context | |
| Context | configure anysec tunnel-encryption encryption-group string peer-tunnel-attributes | |
| Tree | peer-tunnel-attributes | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
flex-algo-id number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Flexible algorithm ID | |
| Context | configure anysec tunnel-encryption encryption-group string peer-tunnel-attributes flex-algo-id number | |
| Tree | flex-algo-id | |
| Range | 128 to 255 | |
| Introduced | 23.3.R1 | |
|
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
igp-instance-id number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | IGP instance ID | |
| Context | configure anysec tunnel-encryption encryption-group string peer-tunnel-attributes igp-instance-id number | |
| Tree | igp-instance-id | |
| Range | 0 to 31 | 64 to 95 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
routing-protocol keyword
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Routing protocol | |
| Context | configure anysec tunnel-encryption encryption-group string peer-tunnel-attributes routing-protocol keyword | |
| Tree | routing-protocol | |
| Options | ||
| Default | sr-isis | |
| Introduced | 23.3.R1 | |
|
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
security-termination-policy reference
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Security termination policy used by encryption group | |
| Context | configure anysec tunnel-encryption encryption-group string security-termination-policy reference | |
| Tree | security-termination-policy | |
Reference | configure anysec tunnel-encryption security-termination-policy string | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
security-termination-policy [policy-name] string
| Synopsis | Enter the security-termination-policy list instance | |
| Context | configure anysec tunnel-encryption security-termination-policy string | |
| Tree | security-termination-policy | |
| Max. Instances | 512 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
[policy-name] string
| Synopsis | ANYSec security termination policy name | |
| Context | configure anysec tunnel-encryption security-termination-policy string | |
| Tree | security-termination-policy | |
| String Length | 1 to 64 | |
Notes | This element is part of a list key. | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
admin-state keyword
| Synopsis | Administrative state of the security termination policy | |
| Context | configure anysec tunnel-encryption security-termination-policy string admin-state keyword | |
| Tree | admin-state | |
| Options | ||
| Default | disable | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |
flex-algo-id number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Flexible algorithm ID | |
| Context | configure anysec tunnel-encryption security-termination-policy string flex-algo-id number | |
| Tree | flex-algo-id | |
| Range | 128 to 255 | |
| Introduced | 23.3.R1 | |
|
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
igp-instance-id number
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | IGP instance ID | |
| Context | configure anysec tunnel-encryption security-termination-policy string igp-instance-id number | |
| Tree | igp-instance-id | |
| Range | 0 to 31 | 64 to 95 | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
local-address (ipv4-address-no-zone | ipv6-address-no-zone)
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Local address | |
| Context | configure anysec tunnel-encryption security-termination-policy string local-address (ipv4-address-no-zone | ipv6-address-no-zone) | |
| Tree | local-address | |
| Introduced | 23.3.R1 | |
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
routing-protocol keyword
|
WARNING: Modifying this element toggles the admin-state of the parent element automatically for the new value to take effect. | ||
| Synopsis | Routing protocol | |
| Context | configure anysec tunnel-encryption security-termination-policy string routing-protocol keyword | |
| Tree | routing-protocol | |
| Options | ||
| Default | sr-isis | |
| Introduced | 23.3.R1 | |
|
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se | |
rx-must-be-encrypted boolean
| Synopsis | Enforce encryption for received packets | |
| Context | configure anysec tunnel-encryption security-termination-policy string rx-must-be-encrypted boolean | |
| Tree | rx-must-be-encrypted | |
| Default | false | |
| Introduced | 23.3.R1 | |
|
Platforms | 7750 SR-1-24D, 7750 SR-1-46S, 7750 SR-1-48D, 7750 SR-1-92S, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-1se |