encryption (IPsec SA for OSPF)

Syntax

encryption {algorithm (3des-cbc | des-cbc | null);key {ascii-text key;hexadecimal key;}}

Hierarchy Level

[edit security ipsec security-association sa-name manual direction bidirectional]

Release Information

Statement introduced in Junos OS Release 12.1X46-D20.

Description

Configure encryption parameters for a manual IPsec security association (SA) to be applied to an OSPF or OSPFv3 interface or virtual link.

Options

algorithm

Type of encryption algorithm. It can be one of the following:

  • 3des-cbc—Has block size of 8 bytes (64 bits); its key size is 192 bits long.
  • des-cbc—Has a block size of 8 bytes (64 bits); its key size is 48 bits long.
  • null—With null encryption, you are choosing not to provide encryption on OSPFv3 headers.
key

Type of encryption key. It can be one of the following:

  • ascii-text key—ASCII text key. For the des-cbc option, the key contains 8 ASCII characters; for 3des-cbc, the key contains 24 ASCII characters.
  • hexadecimal key—Hexadecimal key. For the des-cbc option, the key contains 16 hexadecimal characters; for the 3des-cbc option, the key contains 48 hexadecimal characters.

Required Privilege Level

view-level—To view this statement in the configuration.

control-level—To add this statement to the configuration.

Related Documentation