Turin Networks Adit 3000 Series and Multi-Service Router (MSR) Card none

To Next Page

To Previous Page

14-16 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) CLI

Configuration - IPSec Mode

no transform-set

Use the IPSec no transform-set command to disable Perfect Forward Secrecy. To enable PFS, see

transform-set command on page 14-20.

Syntax: (config-ipsec-{n})# no transform-set {ah-md5|ah-sha|esp-3des|

|ipcomp}

Example: (config-ipsec-1)# no transform-set esp-md5

Supported Platforms:

Adit 3104, Adit 3200, Adit 3500, MSR

Field Definition

ah-md5 Authentication Header transform using MD5 authentication. Default.

ah-sha Authentication Header transform using Secure Hash Algorithm

(SHA1) authentication. Default.

esp-aes Encapsulating Security Payload (ESP) encryption transform using

Advanced Encryption Standard (AES) 128-bit encryption.

esp-aes192 Encapsulating Security Payload (ESP) encryption transform using

Advanced Encryption Standard (AES) 128-bit encryption.

esp-aes256 Encapsulating Security Payload (ESP) encryption transform using

Advanced Encryption Standard (AES) 256-bit encryption.

esp-des Encapsulating Security Payload (ESP) encryption transform using

Data Encryption Standard (DES) 56-bit encryption.

esp-3des Encapsulating Security Payload (ESP) encryption transform using

Data Encryption Standard (DES) 168-bit encryption.

esp-null Encapsulating Security Payload (ESP) encryption transform using no

encryption.

esp-md5 Encapsulating Security Payload (ESP) encryption transform using

Message-Digest Algorithm 5 (MD5) authentication. Default.

esp-sha Encapsulating Security Payload (ESP) encryption transform using

Secure Hash Algorithm (SHA1) authentication. Default.

ipcomp IP Payload Compression Protocol (IPComp) compression.

Turin Networks Adit 3000 Series and Multi-Service Router (MSR) Card none - No Transform-Set