HP 7000 dl Router manual Crypto ipsec transform-set setname parameters, Syntax Description

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

crypto ipsec transform-set <setname> <parameters>

Use the crypto ipsec transform-setcommand to define the transform configuration for securing data (e.g., esp-3des, esp-sha-hmac, etc.). The transform-set is then assigned to a crypto map using the map’s set transform-setcommand. See set transform-set <setname1 - setname6> on page 404.

Note	For VPN configuration example scripts, refer to the technical support note VPN
	Configuration Guide located on the ProCurve SROS Documentation CD provided with
	your unit.
Syntax Description
<setname>	Assign a name to the transform-set you are about to define.
<parameters>	Assign a combination of up to three security algorithms. This field is a valid
	combination of the following:
	•	ah-md5-hmac, ah-sha-hmac
	• esp-des, esp-3des, esp-aes-128-cbc, esp-aes-192-cbc, esp-aes-256-cbc,
		esp-null
	•	esp-md5-hmac, esp-sha-hmac

Default Values

There are no default settings for this command.

Command Modes

(config)# Global Configuration Mode

Functional Notes

Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto map is associated with transform sets which contain specific security algorithms.

If no transform-set is configured for a crypto map, the entry is incomplete and will have no effect on the system.

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 230