Configuring An Ipsec Transform Set - HP MSR Series Configuration Manual

Figure 101 Non-mirror image ACLs

Configuring an IPsec transform set

An IPsec transform set, part of an IPsec policy, defines the security parameters for IPsec SA
negotiation, including the security protocol, encryption algorithms, and authentication algorithms.
Changes to an IPsec transform set affect only SAs negotiated after the changes. To apply the
changes to existing SAs, execute the reset ipsec sa command to clear the SAs so that they can be
set up by using the updated parameters.
To configure an IPsec transform set:
Step
1. Enter system view.
2. Create an IPsec
transform set and enter
its view.
3. Specify the security
protocol for the IPsec
transform set.
Command
system-view
ipsec transform-set
transform-set-name
protocol { ah | ah-esp | esp }
295
Remarks
N/A
By default, no IPsec transform set
exists.
Optional.
By default, the IPsec transform set
uses ESP as the security protocol.