Zte ZXR10 - Crypto Map

Chapter6IPSecIPv4NetworkSafecommands
Syntax
Description
<transform-set-na
me>
Transformsetname,astringnotmorethan
20characters
transport|tunnelEncapsulationmode,transportortunnel
DefaultsThetransformsetencapsulationmodeistunnelbydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItismainlyimplementedonGARcurrently.
�Thetransformsetmustexistbeforethetransformsetencap-
sulatedmodeisset.
ExampleThisexampledescribeshowtocongurethetransformsetencap-
sulatedmode.
ZXR10(config)#cryptoipsectransform-setmyset
encapsulation-modetransport
ZXR10(config)#showcryptoipsectransform-set
Transformset"myset":{ah-md5-hmac,esp-3des}
willnegotiate={Transport}
ZXR10(config)#nocryptoipsectransform-setmyset
encapsulation-mode
ZXR10(config)#showcryptoipsectransform-setmyset
Transformset"myset":{ah-md5-hmac,esp-3des}
willnegotiate={tunnel}
Related
Commands
showcryptoipsectransform-sete
cryptoipsectransform-set
cryptomap
PurposeUsethiscommandtoaddordeleteasecuritypolicy.
CommandModesGlobalconguration
Syntaxcryptomap<map-name><sequence-number>{manual|isak
mp}
nocryptomap<map-name><sequence-number>
Syntax
Description
<map-name>
Securitypolicysetname,lessthan18
characters
<sequence-number>Sequencenumber ,range:1~65535
manual|isakmpPolicytype,manualorIKEnegotiation
Instructions�Theplatformversion4.8.01andupgradeversionssupportthis
command.
�ItisimplementedmainlyonGARcurrently.
�Legalcharactersofthesecuritypolicymapnameincludeal-
phabet,numberandunderline.Thecharacterisnotcasesen-
sitive.Policytypecannotbechanged.Itisonlydeletedand
thencreated.
CondentialandProprietaryInformationofZTECORPORATION71