Link an IPsec Policy to an Interface
Use the following procedure to link an IPsec policy to an interface, and configure a policy direction. By default, the direction is both.
Before you begin
-
You must enable IPsec on the interface first, and then you link the IPsec policy to the interface.
About this task
You cannot delete or modify an IPsec policy if the policy links to a port or VLAN interface. If you need to modify the policy, first unlink the policy from the port or VLAN interface.
Procedure
Example
Link the IPsec policy newpolicy to the IPv6 interface VLAN 100:
Switch:1>enable Switch:1#configure terminal Switch:1(config)#interface vlan 100 Switch:1(config-if)#ipv6 ipsec policy newpolicy dir both
Variable Definitions
The following table defines parameters for the ip ipsec policy and ipv6 ipsec policy commands.
Variable |
Value |
---|---|
WORD<1–32> |
Specifies the policy ID. |
dir <both|in|out> |
Specifies the direction you want to protect with IPsec:
The default is both. |