# CSCF Crypto Template Configuration Mode Commands

The CSCF Crypto Template Configuration Mode is used to configure a P-CSCF IPsec policy. It includes most of the IPsec parameters and Internet Key Exchange version 1 (IKEv1) parameters for cryptographic and authentication algorithms etc. A P-CSCF service will not support IPSec without a configured crypto template. Only one crypto template can be configured per P-CSCF service.

IMPORTANT:

The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
end

Exits the current mode and returns to the Exec Mode.
Product:

All
Privilege:

Security Administrator, Administrator
Syntax

    end

Usage:

Change the mode back to the Exec Mode.
exit

Exits the current mode and returns to the previous mode.
Product:

All
Privilege:

Security Administrator, Administrator
Syntax

    exit

Usage:

Returns to the previous mode.
ipsec

Configures parameters for the 3GPP/3GPP2 P-CSCF security associations within this crypto template.
Platform:

ASR 5000
Product:

SCM
Privilege:

Security Administrator, Administrator
Syntax

    ipsec transform-set
    list list_name

transform-set list name

transform-set: Specifies a context-level IPSec security association transform set to be used for deriving 3GPP/3GPP2 P-CSCF security associations from this crypto template.

list list_name: A space separated list of 3GPP/3GPP2 P-CSCF security association transform sets. list_name must be an existing 3GPP/3GPP2 P-CSCF transform set and be from 1 to 127 alpha and/or numeric characters.

IMPORTANT:

A minimum of one transform set is required. A maximum of four transform sets may be specified.
Usage:

Use this command to configure parameters for the 3GPP/3GPP2 P-CSCF security associations within this crypto template.
Example:
The following command configures the 3GPP/3GPP2 P-CSCF transform set list name to ikev1list1:

    ipsec transform-set list ikev1list1