Command Reference Guide

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

crypto ipsec transform-set <setname> <parameters>

Use the crypto ipsec transform-set command to define the transform configuration for securing data

(e.g., esp-3des, esp-sha-hmac, etc.). The transform-set is then assigned to a crypto map using the map’s

set transform-set command. See set transform-set <setname1 - setname6> on page 404.

Syntax Description

<setname> Assign a name to the transform-set you are about to define.

<parameters> Assign a combination of up to three security algorithms. This field is a valid

combination of the following:

• ah-md5-hmac, ah-sha-hmac

• esp-des, esp-3des, esp-aes-128-cbc, esp-aes-192-cbc, esp-aes-256-cbc,

esp-null

• esp-md5-hmac, esp-sha-hmac

Default Values

There are no default settings for this command.

Command Modes

(config)# Global Configuration Mode

Functional Notes

Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto

map is associated with transform sets which contain specific security algorithms.

If no transform-set is configured for a crypto map, the entry is incomplete and will have no effect on the

system.

Note

For VPN configuration example scripts, refer to the technical support note VPN

Configuration Guide located on the ProCurve SROS Documentation CD provided with

your unit.