ADTRAN AOS Version R10.1.0 Command Reference Manual page 3939

Command Reference Guide
Refer to the following list for key length requirements.
Algorithm:
DES
3DES
AES-128-CBC
AES-192-CBC
AES-256-CBC
MD5
SHA1
Usage Examples
The following example configures an AOS product for virtual private network (VPN) using IPSec manual
keys. This example assumes that the AOS product has been configured with a wide area network (WAN)
IP address of 63.97.45.57 on interface ppp 1 and a local area network (LAN) IP address of 10.10.10.254
on interface ethernet 0/1. The peer private IP subnet is 10.10.20.0.
For more detailed information on VPN configuration, refer to the VPN configuration guide located on the
AOS Documentation CD provided with your unit.
Step 1:
Enter the Global Configuration mode (i.e., config terminal mode).
>enable
#configure terminal
Step 2:
Enable VPN support using the ip crypto command. This command allows crypto maps to be applied to
interfaces, and enables the Internet key exchange (IKE) server to listen for IKE negotiation sessions on
User Datagram Protocol (UDP) port 500.
(config)#ip crypto
Step 3:
Define the transform set. A transform set defines the encryption and/or authentication algorithms to be
used to secure the data transmitted over the VPN tunnel. Multiple transform sets may be defined in a
system. Once a transform set is defined, many different crypto maps within the system can reference it. In
this example, a transform set named highly_secure has been created. This transform set defines ESP
with authentication implemented using 3DES encryption and SHA1 authentication.
(config)#crypto ipsec transform-set highly_secure esp-3des esp-sha-hmac
(cfg-crypto-trans)#mode tunnel
60000CRG0-35E
Minimum key length required:
64 bits in length; 8 hexadecimal bytes
192 bits in length; 24 hexadecimal bytes
128 bits in length; 16 hexadecimal bytes
192 bits in length; 24 hexadecimal bytes
256 bits in length; 32 hexadecimal bytes
128 bits in length; 16 hexadecimal bytes
160 bits in length; 20 hexadecimal bytes
Copyright © 2012 ADTRAN, Inc.
Crypto Map Manual Command Set
3939