Brocade Communications Systems RFS6000 System Reference Manual page 421

4. Refer to the Transform Sets field to view the following data:
5. Select an IPSec VPN transform set (by its index) and click the Edit button to modify its
6. Select an index and click the Delete button to remove it from the table.
7.
Editing an existing transform set
If the attributes of an existing transform set no longer lend themselves useful, consider editing the
transform set to be relevant with the needs of existing VPN peers.
To edit the attributes of an existing transform set:
1. Select Security > IPSec VPN from the main menu tree.
2. Click the Configuration tab.
3. Select an existing transform set and click the Edit button.
Brocade Mobility RFS6000 and RFS7000 System Reference Guide
53-1001858-01
Name
Displays a transform set identifier used to differentiate transform sets. The index is
helpful when transform sets with similar attributes need to be revised or
discarded.
AH Authentication Displays the AH Transform Authentication scheme used with the index. Options
Scheme include:
•
•
•
ESP Encryption Scheme
Displays the ESP Encryption Transform used with the index. Options include:
None - No ESP encryption is used with the transform set.
•
•
•
•
•
ESP Authentication Displays the ESP Authentication Transform used with the index. Options include:
•
Scheme
•
•
Mode Displays the current mode used with the transform set. The mode is either Tunnel
or Transport.
properties. For more information, see
If none of the transform sets displayed appear useful, click the Add button to create a new one.
For more information, see
None - No AH authentication is used.
AH-MD5-HMAC - AH with the MD5 (HMAC variant) authentication algorithm.
AH-SHA-HMAC - AH with the SHA (HMAC variant) authentication algorithm.
ESP-DES - ESP with the 56-bit DES encryption algorithm.
ESP-3DES - ESP with 3DES, ESP with AES.
ESP-AES - ESP with 3DES, ESP with AES (128 bit key).
ESP-AES 192 - ESP with 3DES, ESP with AES (192 bit key).
ESP-AES 256 - ESP with 3DES, ESP with AES (256 bit key)
None - No ESP authentication is used with the transform set.
MD5-HMAC - AH with the MD5 (HMAC variant) authentication algorithm.
SHA-HMAC - AH with the SHA (HMAC variant) authentication algorithm.
"Editing an existing transform set"
"Adding a new transform set"
Configuring IPSec VPN
on page 407.
on page 409.
6
407