HP TippingPoint Next Generation Firewall manual Spi, Cryptalgo, AES Cryptkey, Authalgo, HMAC-MD5

delete sa esp ((A.B.C.DX:X::X:X) SPI)

Valid entries:
sa	Configure Security Association
esp	Delete ESP Security Associations
all	Delete all ESP Security Associations
(A.B.C.DX:X::X:X)	Security Association remote address
SPI	Security Parameter Index

Example

NGFW{running-manual-sa}delete sa esp 192.168.2.2 1

NGFW{running-manual-sa}sa

Configure Security Association.

Syntax

sa esp (A.B.C.D A.B.C.D) SPI MODE ((CRYPTALGO CRYPTKEY)null) AUTHALGO AUTHKEY sa esp (X:X::X:X X:X::X:X) SPI MODE ((CRYPTALGO CRYPTKEY)null) AUTHALGO AUTHKEY

sa esp (A.B.C.D A.B.C.D) (1-4294967295) (tunneltransport) ((3des-cbc CRYPTKEY)(aes-cbc CRYPTKEY)null) (hmac-md5 AUTHKEYhmac-sha1 AUTHKEY)

sa esp (X:X::X:X X:X::X:X) (1-4294967295) (tunneltransport) ((3des-cbc CRYPTKEY)(aes-cbc CRYPTKEY)null) (hmac-md5 AUTHKEYhmac-sha1 AUTHKEY)

Valid entries:

esp	ESP security association
A.B.C.D	Security Association source IPv4 address
A.B.C.D	Security Association destination IPv4 address
X:X::X:X	Security Association source IPv6 address
X:X::X:X	Security Association destination IPv6 address
SPI	Security Parameter Index from 1 to 2^32-1 (e.g. 0x1 or 1 to 0xffffffff or
4294967295)
MODE	IPsec processing mode
Possible values for MODE are:
tunnel	Tunnel mode
transport Transport mode
CRYPTALGO	IPsec encryption algorithm
Possible values for CRYPTALGO are:
3des-cbc	Triple DES
aes-cbc	AES
CRYPTKEY	Encryption key
format: ASCII string ("abcdefgh1234#=+...")
hexadecimal	value (0x123456789abcdef0)
192 bits (24 bytes) for 3des-cbc
128/192/256	bits (16/24/32 bytes) for aes-cbc
null	ESP_NULL encryption (RFC2410)
AUTHALGO	IPsec authentication algorithm
Possible values for AUTHALGO are:
hmac-md5	HMAC-MD5
hmac-sha1 HMAC-SHA1
AUTHKEY	Authentication/integrity key
format: ASCII string ("abcdefgh1234#=+...")
hexadecimal	value (0x123456789abcdef0)
length: 128	bits (16 bytes) for hmac-md5
160 bits (20 bytes) for hmac-sha1
Example
NGFW{running-manual-sa}sa esp 192.168.1.1 192.168.2.2 1 tunnel aes-cbc
0x4d7acaf0c08349ebbcbd86a2093eadf69786537755fc3ea23835c2d71450fdf5 hmac-sha1
0x6a4a71232e102e404979f8edef925a51b1ac098d
	NGFW Command Line Interface Reference	183