esp authentication-algorithm

Syntax

esp authentication-algorithm sha1

undo esp authentication-algorithm

View

IPsec proposal view

Default level

2: System level

Parameters

sha1: Uses the SHA1 algorithm, which uses a 160-bit key.

Description

Use the esp authentication-algorithm command to specify an authentication algorithm for ESP.

Use the undo esp authentication-algorithm command to configure ESP not to perform authentication on packets.

By default, SHA-1 is used.

You must use both ESP authentication and encryption.

For ESP, you must specify an encryption algorithm, an authentication algorithm, or both. The undo esp authentication-algorithm command takes effect only if one encryption algorithm is specified for ESP.

Related commands: ipsec proposal, esp encryption-algorithm, proposal, and transform.

Examples

# Configure IPsec proposal prop1 to use ESP and specify SHA1 as the authentication algorithm for ESP.

<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] transform esp
[Sysname-ipsec-proposal-prop1] esp authentication-algorithm sha1