Crypto Transform Set Configuration Mode Commands


Crypto Transform Set Configuration Mode Commands
 
 
The Crypto Transform Set Configuration Mode is used to configure properties for system transform sets.
Transform Sets are used to define IPSec security associations (SAs). IPSec SAs specify the IPSec protocols to use to protect packets.
 
Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
 
end
Exits the current configuration mode and returns to the Exec mode.
Product
All
Privilege
Security Administrator, Administrator
Syntax
end
Usage
Return to the Exec mode.
 
exit
Exits the current configuration mode and returns to the context configuration mode.
Product
All
Privilege
Security Administrator, Administrator
Syntax
exit
Usage
Return to the context configuration mode.
 
mode
Configures the IPSec encapsulation mode.
Product
PDSN, HA, GGSN, PDIF, SCM
Privilege
Security Administrator, Administrator
Syntax
mode { transport | tunnel }
transport
Default: Disabled
Specifies that the transform set only protects the upper layer protocol data portions of an IP datagram, leaving the IP header information unprotected.
Important: This mode should only be used if the communications end-point is also the cryptographic end-point.
tunnel
Default: Enabled
Specifies that the transform set protects the entire IP datagram as displayed in the following figure.
This mode should be used if the communications end-point is different from the cryptographic end-point as in a VPN.
Usage
This command specifies the encapsulation mode for the transform set.
Example
The following command configures the transforms set’s encapsulation mode to transport:
mode transport
 

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883