Cisco OL-4015-08 User Manual page 317

Chapter 13 IP Security
Note
Available Transform Sets
Note
Selected Transform Sets
What Do You Want to Do?
If you want to:
Add a transform set to the Selected
Transform Sets box.
Remove a transform set from the
Selected Transform Sets box.
OL-4015-08
A crypto map can contain a maximum of 6 transform sets.
Configured transform sets available for use in crypto maps. If no transform sets
have been configured on the router, this list contains the default transform sets that
SDM provides.
Not all routers support all transform sets (encryption types). Unsupported
•
transform sets will not appear in the screen.
Not all IOS images support all the transform sets that SDM supports.
•
Transform sets unsupported by the IOS image will not appear in the screen.
If hardware encryption is turned on, only those transform sets supported by
•
both hardware encryption and the IOS image will appear in the screen.
The transform sets that have been selected for this crypto map, in the order in
which they will be used. Both ends of a VPN connection must use the same
transform set, and they can negotiate to determine which set to use. Configuring
multiple transform sets helps ensure that your router can offer a transform set that
the peer will accept. During negotiations, the router will offer transform sets in
the order given in this list. You can use the up and down arrow buttons to reorder
the list.
Do this:
Select a transform set in the Available Transform Sets box,
and click the right-arrow button.
Select the transform set you want to remove, and click the
left-arrow button.
Cisco Router and Security Device Manager Version 2.2 User's Guide
IPSec Policies
13-33