Crypto Ipsec Transform-Set; Crypto Ipsec Transform-Set Encapsulation-Mode - Zte ZXR10 Command Manual

ZXR10 Command Manual (Security Volume)
Purpose
Command Modes
Syntax
Syntax
Description
Instructions
Example
Related
Commands
Purpose
Command Modes
Syntax
70 Confidential and Proprietary Information of ZTE CORPORATION

crypto ipsec transform-set

Use this command to create or delete the transform set used for
IPsec protection.
Global configuration
crypto ipsec transform-set <transform-set-name>[transfo
rm1 | transform2 | transform3]
no crypto ipsec transform-set <transform-set-name>
<transform-set-na
me>
<transform>
�
The platform version 4.8.01 and upgrade versions support the
command.
� It is mainly implemented on GAR currently.
� A transform set can define 3 transforms at most.
This example describes how to create IPSec transform set.
ZXR10(config)#crypto ipsec transform-set myset
ah-md5-hmac esp-3des
ZXR10(config)#show crypto ipsec transform-set myset
Transform set "myset": {ah-md5-hmac,esp-3des}
will negotiate = {Transport}
ZXR10(config)#no crypto ipsec transform-set myset
ZXR10(config)#show crypto ipsec transform-set
ZXR10(config)#
show crypto ipsec transform-set

crypto ipsec transform-set

crypto ipsec transform-set
encapsulation-mode
Use this command to set the transform set encapsulation mode
when the transform set exists.
Global configuration
crypto ipsec transform-set <transform-set-name> encapsula
tion-mode {transport | tunnel}
no crypto ipsec transform-set <transform-set-name> encaps
ulation-mode
Transform set name, a string not more than
20 characters
There are 3 transforms at most in a transform
set.