Dell Brocade G620 Brocade 8.0.1 Fabric OS Command Reference - Page 464

ipSecConfig ipSecConfig Configures Internet Protocol security (IPSec) policies for Ethernet management interfaces. Synopsis ipsecconfig --enable [default] --disable ipsecconfig --add | --modify type [subtype] [arguments] ipsecconfig --delete [type] arguments ipsecconfig --flush manual-sa ipsecconfig --show type [subtype] arguments ipsecconfig --help [command_type subtype] Description Use this command to configure the Internet Protocol Security (IPSec) feature for traffic flows on switch Ethernet management interfaces, or to display the current configuration. Internet Protocol security (IPSec) is a framework of open standards that provides private, secure communication over Internet Protocol (IP) networks through the use of cryptographic security services. IPSec uses different protocols to ensure the authentication, integrity, and confidentiality of the communication. • Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. • Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks, but unlike ESP, AH does not provide confidentiality. IPSec can protect either the entire IP datagram or only the upper-layer protocols. The appropriate modes are called tunnel mode and transport mode. • In tunnel mode the IP datagram is fully encapsulated by a new IP datagram using the IPSec protocol. • In transport mode only the payload of the IP datagram is handled by the IPSec protocol; it inserts the IPSec header between the IP header and the upper-layer protocol header. The IPSec key management supports Internet Key Exchange (IKE) or Manual key/SA entry. 440 Brocade Fabric OS Command Reference 53-1004112-02