Transform-Set - H3C MSR Series Command Reference Manual

Views
IPsec policy view
IPsec policy template view
Predefined user roles
network-admin
Usage guidelines
The TFC padding feature can hide the length of the original packet, and might affect the packet
encapsulation and de-encapsulation performance. This feature takes effect on UDP packets
encapsulated by ESP in transport mode and on original IP packets encapsulated by ESP in tunnel
mode.
Examples
# Enable TFC padding for the IPsec policy policy1.
<Sysname> system-view
[Sysname] ipsec policy policy1 10 isakmp
[Sysname-ipsec-policy-isakmp-policy1-10] tfc enable
Related commands
display ipsec ipv6-policy
display ipsec policy

transform-set

Use transform-set to specify an IPsec transform set for an IPsec policy, IPsec policy template, or
IPsec profile.
Use undo transform-set to remove the IPsec transform set specified for an IPsec policy, IPsec
policy template, or IPsec profile.
Syntax
transform-set transform-set-name&<1-6>
undo transform-set [ transform-set-name ]
Default
No IPsec transform set is specified for an IPsec policy, IPsec policy template, or IPsec profile.
Views
IPsec policy view
IPsec policy template view
IPsec profile view
Predefined user roles
network-admin
Parameters
transform-set-name&<1-6>: Specifies a space-separated list of up to six IPsec transform sets by
their names, a case-insensitive string of 1 to 63 characters.
Usage guidelines
You can specify only one IPsec transform set for a manual IPsec policy. If you execute this command
multiple times, the most recent configuration takes effect.
570