This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Enterprise
Community Forums Switches
Cannot assign IPSEC propo...

Cannot assign IPSEC proposal to SA on S6720

Created: Aug 18, 2019 10:12:36Latest reply: Aug 21, 2019 08:47:29 65 3 0 0
  Rewarded Hi-coins： 0 (problem resolved)
display all floors #1

I'm trying to setup IPSEC tunnel mode, but cannot assign proposal:


ipsec proposal p1

 esp authentication-algorithm sha2-256

 esp encryption-algorithm aes


Then when I try:

[WAN]ipsec sa S1

[WAN-ipsec-sa-s1]proposal p1

Error: The proposal is not supported by IPSec6.


I'm using IPv6, but I need IPSEC only on IPV4. What needs to be configured for successfull setup? And why tis proposal is not supported there at all?

VRP (R) software, Version 5.170 (S6720 V200R010C00SPC600)

Patch Package Version:V200R010SPH001


Thanks


  • x
  • convention：

I have this problem too (0) Favorite(0) Share Report
Featured Answers
Popeye_Wang
Admin Created Aug 21, 2019 06:58:53 Helpful(0) Helpful(0)

Hi @AndyPE，

First you need to determine the specific model of the switch. Only S6720(s)-EI supports IPSEC in v2r10 version. Otherwise, you need to upgrade the switch.
S6700

This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention：
All Answers
ster
ster Created Aug 18, 2019 10:41:43 Helpful(0) Helpful(0)

Hi!

Only the S5720EI, S5720HI, S5720SI, S5720S-SI, S6720EI, and S6720S-EI support these IPSec configuration commands.
Prerequisites an IPSec SA has been configured.
The ripng ipsec sa command enables IPSec on a RIPng interface. IPSec authenticates received and sent RIPng packets by using the specified SA (including the security algorithm and key). This improves the security of the RIPng network.
The command can take effect only after IPv6 is enabled for the interface by the ipv6 enable command.

If the ripng ipsec sa command is run on an interface, all RIPng packets received and sent by the interface will be authenticated by using the SA specified in the command.
Configuration reference:
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] ipv6 enable
[HUAWEI-Vlanif10] ripng ipsec sa sa1
<HUAWEI> system-view
[HUAWEI] ipsec proposal prop1
[HUAWEI-ipsec-proposal-prop1] transform ah
[HUAWEI-ipsec-proposal-prop1] encapsulation-mode transport
[HUAWEI-ipsec-proposal-prop1] quit
[HUAWEI] ipsec sa sa1
[HUAWEI-ipsec-sa-sa1] proposal prop1

  • x
  • convention：
Popeye_Wang
Popeye_Wang Admin Created Aug 21, 2019 06:58:53 Helpful(0) Helpful(0)

Hi @AndyPE，

First you need to determine the specific model of the switch. Only S6720(s)-EI supports IPSEC in v2r10 version. Otherwise, you need to upgrade the switch.
S6700

This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention：
Hobbit
Hobbit Created Aug 21, 2019 08:47:29 Helpful(0) Helpful(0)

“not supported by IPSec6.” What ipv6 configurations exist on the device? The fault may be caused by the configuration of the ipv6 on the device. Can you share more configurations?
  • x
  • convention：
Back to list

Reply

Reply
Advanced
B Color Image Link Quote Code Smilies
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy Terms of Use
Huawei Enterprise Huawei Carrier Forum Training & Certification

Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.

APP