54-38
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 54 Configuring Routing Policies on Firewall Devices
Configuring OSPFv3
Add/Edit Neighbor Dialog Box (OSPFv3)
You must define a static neighbor for each point-to-point, non-broadcast interface. This feature lets you
broadcast OSPFv3 advertisements across an existing VPN connection without having to encapsulate the
advertisements in a GRE tunnel. Note the following restrictions:
•You cannot define the same static neighbor for two different OSPFv3 processes.
•You must define a static route for each static neighbor.
Use the Add/Edit Neighbor dialog box to define a static neighbor for the interface selected in the
Interface table, or to change information for an existing static neighbor.
Encryption Algorithm Choose the type of encryption to use:
•3des – Triple DES; the Data Encryption Standard cipher algorithm
is applied three times to each packet.
•aes-cbc – Encryption is based on the Advanced Encryption
Standard with Cipher Block Chaining, to produce a key of the size
chosen with the Key Type parameter.
The Key Type list is enabled only when you choose this encryption
option. Choose one of these options:
–
128 – For 128-bit keys.
–
192 – For 192-bit keys.
–
256 – For 256-bit keys.
•des – Encryption is based on the Data Encryption Standard, using
56-bit keys.
Encryption Key Enter an encryption key. The length of the key entered depends on the
type of encryption chosen as the Encryption Algorithm, and whether
the key is to be encrypted (when you check the Encrypt Key box):
•3des – 48 characters (192 bits).
•3des (encrypted) – 98 characters (192 bits).
•aes-cbc/128 – 32 characters (128 bits).
•aes-cbc/128 (encrypted) – 66 characters (128 bits).
•aes-cbc/192 – 48 characters (192 bits).
•aes-cbc/192 (encrypted) – 98 characters (192 bits).
•aes-cbc/256 – 64 characters (256 bits).
•aes-cbc/256 (encrypted) – 130 characters (256 bits).
•des – 16 characters (64 bits).
•des (encrypted) – 34 characters (64 bits).
Encrypt Key Check this box to require encryption of the specified Encryption Key
for transmission.
Table54-27 Add/Edit Interface Dialog Box (Continued)
Element Description