Symptom
Enable IPV6 OSPF Encryption IPSEC SPI with aes-cbc 256 type configuration, and enable service-password encryption, save config and reload. After reload, the IPV6 OSPF Encryption IPSEC SPI config errors out and disappears.
router(config)# int te0/0/1
router(config-if)# ipv6 ospf encryption ipsec spi 400 esp aes-cbc 256 68566B5970337336763979244226452948404D635166546A576E5A7134743777 sha1 8bb6118f8fd6935ad0876a3be34a717d32708ffd
router(config-if)# end
router(config)# service password-encryption
router# sh ru int te0/0/1
Building configuration...
Current configuration : 331 bytes
!
interface TenGigabitEthernet0/0/1
no ip address
ipv6 ospf encryption ipsec spi 400 esp aes-cbc 256 7 01455E510D5D245A781B1E5A4A5244415D5B5279727371616176415540575404000C0B005E573C400A0D06050400005D7A53500E7251325155085F515B721B195E sha1 7 005C3124520A5A5E29796A6A5F405642332F5C5C7D7D057B1110714726415256720A0A040456253E32
end
router# copy runn start
router# reload
On boot-up, "% OSPFv3: Authentication key must be 82 hex digits." is seen and the ‘ipv6 ospf encryption ipsec config …’ disappears from ‘show running’
Further Problem Description
Config CLI length exceeds the maximum parser configuration CLI length of 255 characters.
