Configure a bidirectional IPSec SA with an SPI value of 512 and a key value conforming to the FIPS 140-2 rules:
- [edit security]
- ipsec {
-
- internal {
-
- security-association {
-
- manual {
-
- direction bidirectional {
- protocol esp;
- spi 512;
-
- authentication {
- algorithm hmac-sha1-96;
- key ascii-text “$9$I5/hyKX7v4aUM8aUjH5TRhS1vLdb2�?;
- }
-
- encryption {
- algorithm 3des-cbc;
- key ascii-text “$9$90j.COIek8X7VevbYgoji1rh�?;
- }
- }
- }
- }
- }
- }
The text following ascii-text is never displayed in plain text.