Hi!
Only the S5720EI, S5720HI, S5720SI, S5720S-SI, S6720EI, and S6720S-EI support these IPSec configuration commands.
Prerequisites an IPSec SA has been configured.
The ripng ipsec sa command enables IPSec on a RIPng interface. IPSec authenticates received and sent RIPng packets by using the specified SA (including the security algorithm and key). This improves the security of the RIPng network.
The command can take effect only after IPv6 is enabled for the interface by the ipv6 enable command.
If the ripng ipsec sa command is run on an interface, all RIPng packets received and sent by the interface will be authenticated by using the SA specified in the command.
Configuration reference:
<HUAWEI> system-view
[HUAWEI] interface vlanif 10
[HUAWEI-Vlanif10] ipv6 enable
[HUAWEI-Vlanif10] ripng ipsec sa sa1
<HUAWEI> system-view
[HUAWEI] ipsec proposal prop1
[HUAWEI-ipsec-proposal-prop1] transform ah
[HUAWEI-ipsec-proposal-prop1] encapsulation-mode transport
[HUAWEI-ipsec-proposal-prop1] quit
[HUAWEI] ipsec sa sa1
[HUAWEI-ipsec-sa-sa1] proposal prop1