Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

63-18
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 63 Configuring IKE, Load Balancing, and NAC
Configuring IPsec
IPsec Transform Sets
Use this pane to view and add or edit transform sets. A transform is a set of operations done on a data
flow to provide data authentication, data confidentiality, and data compression. For example, one
transform is the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Fields
• Transform Sets—Shows the configured transform sets.
– Name—Shows the name of the transform sets.
– Mode—Shows the mode, Tunnel, of the transform set. This parameter specifies the mode for
applying ESP encryption and authentication; in other words, what part of the original IP packet
has ESP applied. Tunnel mode applies ESP encryption and authentication to the entire original
IP packet (IP header and data), thus hiding the ultimate source and destination addresses.
– ESP Encryption—Shows the Encapsulating Security Protocol (ESP) encryption algorithms for
the transform sets. ESP provides data privacy services, optional data authentication, and
anti-replay services. ESP encapsulates the data being protected.
– ESP Authentication—Shows the ESP authentication algorithms for the transform sets.
• Add—Opens the Add Transform Set dialog box, in which you can add a new transform set.
• Edit—Opens the Edit Transform Set dialog box, in which you can modify an existing transform set.
• Delete—Removes the selected transform set. There is no confirmation or undo.
Modes
The following table shows the modes in which this feature is available:
Add/Edit Transform Set
Use this pane to add or modify a transform set. A transform is a set of operations done on a data flow to
provide data authentication, data confidentiality, and data compression. For example, one transform is
the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English