Motorola RFS Series Reference Manual page 304

5-28 Motorola RF Switch CLI Reference Guide
Usage Guidelines
Follow the table to calculate how many character are required to add the key size for
authentication and encryption. This is used while configuring Manual IPSEC only.
For example, To create a key with authentication type as ESP-SHA and encryption type as
AES-192, enter 20+16=36 characters.
The key size for all the 3 different AES combinations is 128 bits or 16 bytes.
Follow the example below to see how the Auth and Encryption key is created in
(config)# crypto-ipsec
RFSwitch(config)#crypto ipsec transform-set Test1 ?
ah-md5-hmac
ah-sha-hmac
esp-3des
esp-aes
esp-aes-192
esp-aes-256
esp-des
esp-md5-hmac
esp-sha-hmac
RFSwitch(config)#crypto ipsec transform-set Test1 esp-aes-
192 esp-sha-hmac
RFSwitch(config-crypto-ipsec)#exit
RFSwitch(config)#crypto map TestMap-TechPub 10 ipsec-manual
RFSwitch(config-crypto-map)#set peer 1.1.1.1
RFSwitch(config-crypto-map)#match
RFSwitch(config-crypto-map)#set transform-set tfset-manual
instance and used in
AH-HMAC-MD5 transform
AH-HMAC-SHA transform
ESP transform using 3DES cipher (168 bits)
ESP transform using AES cipher
ESP transform using AES cipher (192 bits)
ESP transform using AES cipher (256 bits)
ESP transform using DES cipher (56 bits)
ESP transform using HMAC-MD5 auth
ESP transform using HMAC-SHA auth
(config)# crypt-map
address 101
instance.