ADTRAN AOS Version R10.1.0 Command Reference Manual page 927

Command Reference Guide
crypto ipsec transform-set <name> <parameters>
Use the crypto ipsec transform-set command to define the transform configuration for securing data
(e.g., esp-3des, esp-sha-hmac, etc.). The transform set is then assigned to a crypto map using the map's
set transform-set command. Refer to
disable this feature.
For virtual private network (VPN) configuration example scripts, refer to the VPN
configuration guide located on the AOS Documentation CD provided with your unit.
Syntax Description
<name>
<parameters>
Default Values
No default values are necessary for this command.
Command History
Release 4.1
Functional Notes
Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto
map is associated with transform sets that contain specific security algorithms.
If no transform set is configured for a crypto map, the entry is incomplete and will have no effect on the
system.
Usage Examples
The following example first creates a transform set (Set1) consisting of two security algorithms (up to three
may be defined), and then assigns the transform set to a crypto map (Map1):
(config)#crypto ipsec transform-set Set1 esp-3des esp-sha-hmac
(cfg-crypto-trans)#exit
(config)#crypto map Map1 1 ipsec-ike
(config-crypto-map)#set transform-set Set1
60000CRG0-35E
set transform-set on page
Assigns a name to the transform set you are about to define.
Assigns a combination of up to three security algorithms from the following
list:
• ah-md5-hmac, ah-sha-hmac
• esp-des, esp-3des, esp-aes-128-cbc, esp-aes-192-cbc,
esp-aes-256-cbc, esp-null
• esp-md5-hmac, esp-sha-hmac
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
3932. Use the no form of this command to
927