2150 CHAPTER 140: IPSEC CONFIGURATION COMMANDS
transform
Syntax transform { ah | ah-esp | esp }
undo transform
View IPSec proposal view
Parameter ah: Uses the AH protocol.
ah-esp: Uses ESP first and then AH.
esp: Uses the ESP protocol.
Description Use the transform command to specify the security protocol for an IPSec
proposal.
Use the undo transform command to restore the default.
By default, the ESP protocol is used.
Note that:
■If ESP is used, the default encryption and authentication algorithms are DES
and MD5 respectively.
■If AH is used, the default authentication algorithm is MD5.
■If both AH and ESP are used, AH takes the authentication algorithm of MD5 by
default, while ESP takes the encryption algorithm of DES and uses no
authentication algorithm by default.
■The IPSec proposals at the two ends of an IPSec tunnel must use the same
security protocol.
Related command: ipsec proposal.
Example # Configure IPSec proposal prop1 to use AH.
<Sysname> system-view
[Sysname] ipsec proposal prop1
[Sysname-ipsec-proposal-prop1] transform ah
tunnel local
Syntax tunnel local ip-address
undo tunnel local
View IPSec policy view
Parameter ip-address: Local address for the IPSec tunnel.