IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
764
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
Alcatel-Lucent
CRYPTO IPSEC TRANSFORM-SET
crypto ipsec transform-set <name> {<algo>[<algo>][<algo>]
[<algo>]} [force]
DESCRIPTION
This command is entered in the Configuration Mode. This command creates a
transform-set.
Options for Proposal Under Transform-set
• esp-md5-3des encapsulation with MD5 and three key Triple DES
• esp-md5-aes128 encapsulation with MD5 and 128 bit AES encryption
• esp-md5-aes192 encapsulation with MD5 and 192 bit AES encryption
• esp-md5-aes256 encapsulation with MD5 and 256 bit AES encryption
• esp-md5-des encapsulation with MD5 and 56 bit DES encryption
• esp-sha1-3des encapsulation with SHA1 and three key Triple DES
• esp-sha1-aes128 encapsulation with SHA1 and 128 bit AES encryption
• esp-sha1-aes192 encapsulation with SHA1 and 192 bit AES encryption
• esp-sha1-aes256 encapsulation with SHA1 and 256 bit AES encryption
• esp-sha1-des encapsulation with SHA1 and 56 bit DES encryption
PARAMETERS
DEFAULT VALUE
The OmniAccess 5740 USG will have a default transform-set configuration with
parameters esp-sha1-aes256 esp-sha1-3des esp-md5-aes256 esp-md5-3des
EXAMPLE
ALU(config)# crypto ipsec transform-set netset esp-sha1-aes256
Parameter Description
name Name of the transform-set used.
algo Authentication or encryption algorithm.