group-encryption commands
configure
— group-encryption
— apply-groups reference
— apply-groups-exclude reference
— encryption-keygroup number
— active-outbound-security-association reference
— apply-groups reference
— apply-groups-exclude reference
— authentication-algorithm keyword
— description description
— encryption-algorithm keyword
— keygroup-name named-item-64-or-empty
— security-association number
— apply-groups reference
— apply-groups-exclude reference
— authentication-key encrypted-leaf-hex
— encryption-key encrypted-leaf-hex
— group-encryption-label number
group-encryption command descriptions
group-encryption
| Synopsis | Enter the group-encryption context | |
| Context | configure group-encryption | |
| Tree | group-encryption | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
encryption-keygroup [id] number
| Synopsis | Enter the encryption-keygroup list instance | |
| Context | configure group-encryption encryption-keygroup number | |
| Tree | encryption-keygroup | |
| Max. instances | 127 | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
[id] number
| Synopsis | Encryption key group ID | |
| Context | configure group-encryption encryption-keygroup number | |
| Tree | encryption-keygroup | |
| Range | 1 to 127 | |
Notes | This element is part of a list key. | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
active-outbound-security-association reference
| Synopsis | SPI to use for egressing packets for the key group | |
| Context | configure group-encryption encryption-keygroup number active-outbound-security-association reference | |
| Tree | active-outbound-security-association | |
Reference | configure group-encryption encryption-keygroup number security-association number | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
authentication-algorithm keyword
|
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
| Synopsis | Hashing algorithm used for the authentication function | |
| Context | configure group-encryption encryption-keygroup number authentication-algorithm keyword | |
| Tree | authentication-algorithm | |
| Options | ||
|
Default | sha256 | |
| Introduced | 21.10.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR | |
description description
| Synopsis | Text description | |
| Context | configure group-encryption encryption-keygroup number description description | |
| Tree | description | |
| String length | 1 to 80 | |
| String format | 'string-not-all-spaces' must contain at least one non-space character | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
encryption-algorithm keyword
|
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
| Synopsis | Encryption algorithm for encryption on ESP | |
| Context | configure group-encryption encryption-keygroup number encryption-algorithm keyword | |
| Tree | encryption-algorithm | |
| Options | ||
|
Default | aes128 | |
| Introduced | 21.10.R1 | |
Platforms |
7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR | |
keygroup-name named-item-64-or-empty
| Synopsis | Key group name | |
| Context | configure group-encryption encryption-keygroup number keygroup-name named-item-64-or-empty | |
| Tree | keygroup-name | |
| String length | 0 to 64 | |
| String format | 'string-not-all-spaces' must contain at least one non-space character | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
security-association [security-parameter-index] number
| Synopsis | Enter the security-association list instance | |
| Context | configure group-encryption encryption-keygroup number security-association number | |
| Tree | security-association | |
| Max. instances | 4 | |
| Introduced | 21.10.R1 | |
|
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
[security-parameter-index] number
| Synopsis | Security Parameter Index (SPI) | |
| Context | configure group-encryption encryption-keygroup number security-association number | |
| Tree | security-association | |
| Range | 1 to 1023 | |
Notes | This element is part of a list key. | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR |
authentication-key encrypted-leaf-hex
|
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
| Synopsis | Key used for the authentication algorithm | |
| Context | configure group-encryption encryption-keygroup number security-association number authentication-key encrypted-leaf-hex | |
| Tree | authentication-key | |
Description | This command specifies the key used for the authentication algorithm in a protected format. The specific format is indicated by the hash, hash2, hash3, or custom suffix. See "Configuration secrets" in the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide for more information. | |
| String length | 1 to 166 | |
| String format | 'encrypted-leaf-hex' must have clear text in hex with prefix 0x or end with hash/hash2/hash3/custom | |
Notes | This element is mandatory. | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR | |
encryption-key encrypted-leaf-hex
|
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
| Synopsis | Key used for the encryption algorithm | |
| Context | configure group-encryption encryption-keygroup number security-association number encryption-key encrypted-leaf-hex | |
| Tree | encryption-key | |
Description | This command specifies the key used for the encryption algorithm in a protected format. The specific format is indicated by the hash, hash2, hash3, or custom suffix. See "Configuration secrets" in the 7450 ESS, 7750 SR, 7950 XRS, and VSR System Management Guide for more information. | |
| String length | 1 to 126 | |
| String format | 'encrypted-leaf-hex' must have clear text in hex with prefix 0x or end with hash/hash2/hash3/custom | |
Notes | This element is mandatory. | |
| Introduced | 21.10.R1 | |
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR | |
group-encryption-label number
|
WARNING: Modifying this element recreates the parent element automatically for the new value to take effect. | ||
| Synopsis | Network-wide unique MPLS label for group encryption | |
| Context | configure group-encryption group-encryption-label number | |
| Tree | group-encryption-label | |
| Range | 32 to 2047 | |
| Introduced | 21.10.R1 | |
|
Platforms | 7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR | |