group-encryption commands

configure 
   —  group-encryption 
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  encryption-keygroup number 
         —  active-outbound-security-association reference
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  authentication-algorithm keyword
         —  description string
         —  encryption-algorithm keyword
         —  keygroup-name string
         —  security-association number 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication-key string
            —  encryption-key string
      —  group-encryption-label number
Parent topic: Configuration commands

group-encryption command descriptions

group-encryption

  Synopsis Enter the group-encryption context
  Context configure group-encryption
  Tree group-encryption
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

encryption-keygroup [id] number

  Synopsis Enter the encryption-keygroup list instance
  Context configure group-encryption encryption-keygroup number
  Tree encryption-keygroup
  Max. Instances 127
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[id] number
  Synopsis Encryption key group ID
  Context configure group-encryption encryption-keygroup number
  Range 1 to 127
 

Notes

This element is part of a list key.
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
active-outbound-security-association reference
  Synopsis SPI to use for egressing packets for the key group
  Context configure group-encryption encryption-keygroup number active-outbound-security-association reference
  Tree active-outbound-security-association
 

Reference

configure group-encryption encryption-keygroup number security-association number

  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
authentication-algorithm keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Hashing algorithm used for the authentication function
  Context configure group-encryption encryption-keygroup number authentication-algorithm keyword
  Tree authentication-algorithm
  Default sha256
  Options sha256, sha512
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
description string
  Synopsis Text description
  Context configure group-encryption encryption-keygroup number description string
  Tree description
  String Length 1 to 80
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
encryption-algorithm keyword
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Encryption algorithm for encryption on ESP
  Context configure group-encryption encryption-keygroup number encryption-algorithm keyword
  Tree encryption-algorithm
  Default aes128
  Options aes128, aes256
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
keygroup-name string
  Synopsis Key group name
  Context configure group-encryption encryption-keygroup number keygroup-name string
  Tree keygroup-name
  String Length 0 to 64
  Default  
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
security-association [security-parameter-index] number
  Synopsis Enter the security-association list instance
  Context configure group-encryption encryption-keygroup number security-association number
  Tree security-association
  Max. Instances 4
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
[security-parameter-index] number
  Synopsis Security Parameter Index (SPI)
  Context configure group-encryption encryption-keygroup number security-association number
  Range 1 to 1023
 

Notes

This element is part of a list key.
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
authentication-key string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Key used for the authentication algorithm
  Context configure group-encryption encryption-keygroup number security-association number authentication-key string
  Tree authentication-key
  String Length 1 to 115
 

Notes

This element is mandatory.
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR
encryption-key string
WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Key used for the encryption algorithm
  Context configure group-encryption encryption-keygroup number security-association number encryption-key string
  Tree encryption-key
  String Length 1 to 71
 

Notes

This element is mandatory.
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

group-encryption-label number

WARNING:

Modifying this element recreates the parent element automatically for the new value to take effect.
  Synopsis Network-wide unique MPLS label for group encryption
  Context configure group-encryption group-encryption-label number
  Tree group-encryption-label
  Range 32 to 2047
  Introduced 21.10.R1
 

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR