HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 427

Set Protocol Algorithm Types
AH hash algorithm
ESP • encryption algorithm
• hash algorithm (optional, unless
encryption is not used)
AH and ESP • AH hash algorithm
• ESP encryption algorithm
• ESP hash algorithm (optional)
3. Specify the algorithms:
a. If using AH, you can select:
• an AH hash algorithm
b. If using ESP, you can select:
• an encryption algorithm
• a hash algorithm (optional)
c. If using AH and ESP, you can select:
• an AH hash algorithm
• an ESP encryption algorithm (optional)
• an ESP hash algorithm (optional)
4. Configure tunnel mode.
Table 8-14. Transform Sets
Algorithm Options (Most to
Least secure)
• SHA
• MD5
• encryption:
– AES (256-bit key)
– AES (192-bit)
– 3DES
– AES (128-bit)
– DES
– None
• hash:
– SHA
– MD5
• AH hash:
– SHA
– MD5
• ESP encryption:
– AES (256-bit key)
– AES (192-bit)
– 3DES
– AES (128-bit)
– DES
– None
• ESP hash:
– SHA
– MD5
Virtual Private Networks
Configuring a VPN Using IPSec
Command Syntax
crypto ipsec transform-set
<setname> [ah-sha-hmac | ah-
md5-hmac]
crypto ipsec transform-set
<setname> [esp-aes-256-cbc |
esp-aes-192-cbc | esp-3des | esp-
aes-128-cbc | esp-des | esp-null]
[esp-sha-hmac | esp-md5-hmac]
crypto ipsec transform-set
<setname> [ah-sha-hmac | ah-
md5-hmac] [esp-aes-256-cbc |
esp-aes-192-cbc | esp-3des | esp-
aes-128-cbc | esp-des | esp-null]
[esp-sha-hmac esp-md5-hmac]
8-41