3Com MSR 30, MSR 50 manual Transform, Tunnel local, Syntax transform ah ah-esp esp Undo transform

2150 CHAPTER 140: IPSEC CONFIGURATION COMMANDS

transform

Syntax transform { ah ah-esp esp }

undo transform

View IPSec proposal view

Parameter ah: Uses the AH protocol. ah-esp: Uses ESP first and then AH. esp: Uses the ESP protocol.

Description Use the transform command to specify the security protocol for an IPSec proposal.

Use the undo transform command to restore the default.

By default, the ESP protocol is used.

Note that:

■If ESP is used, the default encryption and authentication algorithms are DES and MD5 respectively.

■If AH is used, the default authentication algorithm is MD5.

■If both AH and ESP are used, AH takes the authentication algorithm of MD5 by default, while ESP takes the encryption algorithm of DES and uses no authentication algorithm by default.

■The IPSec proposals at the two ends of an IPSec tunnel must use the same security protocol.

Related command: ipsec proposal.

Example # Configure IPSec proposal prop1 to use AH.

<Sysname> system-view

[Sysname] ipsec proposal prop1

[Sysname-ipsec-proposal-prop1] transform ah

tunnel local

Syntax tunnel local ip-address

undo tunnel local

View IPSec policy view

Parameter ip-address: Local address for the IPSec tunnel.