HP 7000 dl Router manual Set transform-setsetname1 setname6

SROS Command Line Interface Reference Guide Crypto Map IKE Command Set

set transform-set<setname1 - setname6>

Use the set transform-setcommand to assign up to six transform-sets to a crypto map.

Syntax Description

<setname>	Assign up to six transform-sets to this crypto map by listing the set names,
	separated by a space.

Default Values

By default, there is no transform-set assigned to the crypto map.

Command Modes

(config-crypto-map)# Crypto Map Configuration Mode (IKE or Manual)

Functional Notes

Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto map is associated with transform sets which contain specific security algorithms.

If no transform-set is configured for a crypto map, then the entry is incomplete and will have no effect on the system.

Usage Examples

The following example first creates a transform-set (Set1) consisting of two security algorithms (up to three may be defined), and then assigns the transform-set to a crypto map (Map1):

(config)#crypto ipsec transform-set Set1 esp-3des esp-sha-hmac

(cfg-crypto-trans)#exit

(config)#crypto map Map1 1 ipsec-ike (config-crypto-map)#set transform-set Set1

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 404