HP 12500 Series Configuration Manual page 205

# Apply IPsec policy use1 to interface GigabitEthernet 3/0/1.
[SwitchB] interface gigabitethernet 3/0/1
[SwitchB-GigabitEthernet3/0/1] ipsec policy use1
Verify the configuration:
4.
# Send traffic from subnet 10.5.5.0/24 to subnet 10.4.4.0/24, or from subnet 10.4.4.0/24 to
10.5.5.0/24. IKE negotiation is triggered to establish IPsec SAs between Switch A and Switch B.
# Display the routing table on Switch A.
[SwitchA] display ip routing-table
Routing Tables: Public
Destinations : 8
Destination/Mask
1.1.0.0/16
1.1.1.1/32
2.2.2.0/24
10.4.4.0/24
10.4.4.4/32
10.5.5.0/24
127.0.0.0/8
127.0.0.1/32
The output shows that IPsec RRI has created a static route to subnet 10.5.5.0/24 with the next hop
1.1.1.2.
# Delete the IPsec SAs.
The static route is automatically deleted.
Routes : 8
Proto Pre Cost
Direct 0 0
Direct 0 0
Static 60 0
Direct 0 0
Direct 0 0
Static 60 0
Direct 0 0
Direct 0 0
195
NextHop Interface
1.1.1.1 GE3/0/1
127.0.0.1 InLoop0
1.1.1.2 GE3/0/1
10.4.4.1 GE3/0/2
127.0.0.1 InLoop0
1.1.1.2 GE3/0/1
127.0.0.1 InLoop0
127.0.0.1 InLoop0