beautypg.com

Set transform-set

Page 1051

background image

Command Reference Guide

Crypto Map IKE Command Set

61200990L1-35E

Copyright © 2005 ADTRAN

1051

set transform-set

Use the set transform-set command to assign up to six transform sets to a crypto map. Refer to crypto
ipsec transform-set

on page 329

for information on defining transform sets.

Syntax Description

Assign up to six transform sets to this crypto map by listing the set names,
separated by a space.

Default Values

By default, there is no transform set assigned to the crypto map.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 and Total Access 900
Series units.

Command History

Release 4.1

Command was introduced.

Functional Notes

Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto
map is associated with transform sets which contain specific security algorithms (see

crypto ipsec

transform-set

on page 329

).

If no transform set is configured for a crypto map, then the entry is incomplete and will have no effect on
the system.

Usage Examples

The following example first creates a transform set (Set1) consisting of two security algorithms (up to three
may be defined), and then assigns the transform set to a crypto map (Map1):

(config)#crypto ipsec transform-set Set1 esp-3des esp-sha-hmac

(cfg-crypto-trans)#exit

(config)#crypto map Map1 1 ipsec-ike

(config-crypto-map)#set transform-set Set1