Add Or Edit Ipsec Profile And Add Dynamic Crypto Map; Transform Set - Cisco OL-4015-08 User Manual

Chapter 13 IP Security
Delete

Add or Edit IPSec Profile and Add Dynamic Crypto Map

Name
Available Transform Sets
Selected Transform Sets

Transform Set

OL-4015-08
Click to edit a selected IPSec profile. If the profile you are deleting is currently
used in a DMVPN tunnel, you must configure the DMVPN tunnel to use a
different IPSec profile.
Use this window to add or to edit an IPSec profile, or to add a dynamic crypto
map.
Enter a name for this profile.
This column lists the transform sets configured on this router. To add a transform
set from this list to the Selected Transform Sets column, select a transform set and
click the right arrow (>>) button.
If you need to configure a new transform set, click the Transform Sets node in
the IPSec tree to go to the Transform Sets window. In that window, click Add to
create a new transform set.
This column lists the transform sets that you are using in this profile. You can
select multiple transform sets so that the router you are configuring and the router
at the other end of the tunnel can negotiate which transform set to use.
This screen allows you to view transform sets, add new ones, and edit or remove
existing transform sets. A transform set is a particular combination of security
protocols and algorithms. During the IPSec security association negotiation, the
peers agree to use a particular transform set for protecting a particular data flow.
Cisco Router and Security Device Manager Version 2.2 User's Guide
Transform Set
13-37