Got it
Enterprise
Community Forums Switches
Cannot assign IPSEC propo...

Cannot assign IPSEC proposal to SA on S6720

Created: Aug 18, 2019 10:12:36Latest reply: Aug 21, 2019 08:47:29 234 3 0 0
  Rewarded HiCoins： 0 (problem resolved)
display all floors #1

I'm trying to setup IPSEC tunnel mode, but cannot assign proposal:


ipsec proposal p1

 esp authentication-algorithm sha2-256

 esp encryption-algorithm aes


Then when I try:

[WAN]ipsec sa S1

[WAN-ipsec-sa-s1]proposal p1

Error: The proposal is not supported by IPSec6.


I'm using IPv6, but I need IPSEC only on IPV4. What needs to be configured for successfull setup? And why tis proposal is not supported there at all?

VRP (R) software, Version 5.170 (S6720 V200R010C00SPC600)

Patch Package Version:V200R010SPH001


Thanks


  • x
  • convention：

I have this problem too (0) Favorite(0) Share Report
Previous: networking
Next: Default username and password for S5720
Featured Answers

Recommended answer

(0) (0)
Popeye_Wang
Admin Created Aug 21, 2019 06:58:53 Helpful(0) Helpful(0)

Hi @AndyPE，

First you need to determine the specific model of the switch. Only S6720(s)-EI supports IPSEC in v2r10 version. Otherwise, you need to upgrade the switch.
S6700

View more

This article contains more resources

You need to log in to download or view. No account? Register

x
  • x
  • convention：
All Answers
ster
ster Created Aug 18, 2019 10:41:43 Helpful(0) Helpful(0)

Hi!

Only the S5720EI, S5720HI, S5720SI, S5720S-SI, S6720EI, and S6720S-EI support these IPSec configuration commands.
Prerequisites an IPSec SA has been configured.
The ripng ipsec sa command enables IPSec on a RIPng interface. IPSec authenticates received and sent RIPng packets by using the specified SA (including the security algorithm and key). This improves the security of the RIPng network.
The command can take effect only after IPv6 is enabled for the interface by the ipv6 enable command.

If the ripng ipsec sa command is run on an interface, all RIPng packets received and sent by the interface will be authenticated by using the SA specified in the command.
Configuration reference:
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] ipv6 enable
[HUAWEI-Vlanif10] ripng ipsec sa sa1
<HUAWEI> system-view
[HUAWEI] ipsec proposal prop1
[HUAWEI-ipsec-proposal-prop1] transform ah
[HUAWEI-ipsec-proposal-prop1] encapsulation-mode transport
[HUAWEI-ipsec-proposal-prop1] quit
[HUAWEI] ipsec sa sa1
[HUAWEI-ipsec-sa-sa1] proposal prop1

View more
  • x
  • convention：
Popeye_Wang
Popeye_Wang Admin Created Aug 21, 2019 06:58:53 Helpful(0) Helpful(0)

Hi @AndyPE，

First you need to determine the specific model of the switch. Only S6720(s)-EI supports IPSEC in v2r10 version. Otherwise, you need to upgrade the switch.
S6700

View more

This article contains more resources

You need to log in to download or view. No account? Register

x
  • x
  • convention：
Hobbit
Hobbit Created Aug 21, 2019 08:47:29 Helpful(0) Helpful(0)

“not supported by IPSec6.” What ipv6 configurations exist on the device? The fault may be caused by the configuration of the ipv6 on the device. Can you share more configurations?
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.