IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
560
Beta
Beta
OmniAccess 5510 Unified Services Gateway CLI Command Reference Guide
Alcatel-Lucent
CRYPTO
IPSEC
TRANSFORM
-
SET
crypto ipsec transform-set
<name>
{<
algo
>[<
algo
>][<
algo
>]
[<
algo
>]} [
force
]
D
ESCRIPTION
This command is entered in the Configuration Mode. This command creates a
transform-set.
Options for Proposal Under Transform-set
•
esp-md5-3des encapsulation with MD5 and three key Triple DES
•
esp-md5-aes128 encapsulation with MD5 and 128 bit AES encryption
•
esp-md5-aes192 encapsulation with MD5 and 192 bit AES encryption
•
esp-md5-aes256 encapsulation with MD5 and 256 bit AES encryption
•
esp-md5-des encapsulation with MD5 and 56 bit DES encryption
•
esp-sha1-3des encapsulation with SHA1 and three key Triple DES
•
esp-sha1-aes128 encapsulation with SHA1 and 128 bit AES encryption
•
esp-sha1-aes192 encapsulation with SHA1 and 192 bit AES encryption
•
esp-sha1-aes256 encapsulation with SHA1 and 256 bit AES encryption
•
esp-sha1-des encapsulation with SHA1 and 56 bit DES encryption
P
ARAMETERS
D
EFAULT
V
ALUE
OmniAccess 5510-AA/AB USG will have a default transform-set configuration
with parameters
esp-md5-des
and
esp-sha1-des
E
XAMPLE
ALU(config)# crypto ipsec transform-set netset esp-sha1-aes256
Parameter
Description
name
Name of the transform-set used.
algo
Authentication or encryption algorithm.
