Cisco AJ732A - MDS 9134 Fabric Switch Command Reference Manual page 290

crypto transform-set domain ipsec
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
You can use this command to modify existing IPsec transform sets. If you change a transform set
definition, the change is only applied to crypto map entries that reference the transform set. The change
is not applied to existing security associations, but used in subsequent negotiations to establish new
security associations. If you want the new settings to take effect sooner, you can clear all or part of the
security association database using the clear crypto sa domain ipsec command.
Examples The following example shows how to configure an IPsec transform set:
switch# config terminal
switch(config)# crypto transform-set domain ipsec Set1 esp-aes 128
Related Commands Command
clear crypto sa domain ipsec
crypto ipsec enable
show crypto transform-set
domain ipsec
Cisco MDS 9000 Family Command Reference
4-150
Description
Clears security associations.
Enables IPsec.
Displays IPsec crypto transform set information.
Chapter 4 C Commands
OL-18089-01, Cisco MDS NX-OS Release 4.x