13-37
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter13 IP Security
Transform Set
Delete
Click to edit a selected IPSec profile. If the profile you are deleting is currently
used in a DMVPN tunnel, you must configure the DMVPN tunnel to use a
different IPSec profile.

Add or Edit IPSec Profile and Add Dynamic Crypto Map

Use this window to add or to edit an IPSec profile, or to add a dynamic crypto
map.
Name
Enter a name for this profile.

Available Transform Sets

This column lists the transform sets configured on this router. To add a transform
set from this list to the Selected Transform Sets column, select a transform set and
click the right arrow (>>) button.
If you need to configure a new transform set, click the Tran sfor m Se ts node in
the IPSec tree to go to the Transform Sets window. In that window, click Add to
create a new transform set.

Selected Transform Sets

This column lists the transform sets that you are using in this profile. You can
select multiple transform sets so that the router you are configuring and the router
at the other end of the tunnel can negotiate which transform set to use.
Transform Set
This screen allows you to view transform sets, add new ones, and edit or remove
existing transform sets. A transform set is a particular combination of security
protocols and algorithms. During the IPSec security association negotia tion, the
peers agree to use a particular transform set for protecting a particular data flow.