Crypto Transform Set Configuration Mode Commands

 

The Crypto Transform Set Configuration Mode is used to configure properties for system transform sets.

Transform Sets are used to define IPSec security associations (SAs). IPSec SAs specify the IPSec protocols to use to protect packets.

Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).

end

Exits the current configuration mode and returns to the Exec mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

end

Usage

Use this command to return to the Exec mode.

exit

Exits the current mode and returns to the parent configuration mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

exit

Usage

Use this command to return to the parent configuration mode.

mode

Configures the IPSec encapsulation mode.

Product

PDSN, HA, GGSN, PDIF

Privilege

Security Administrator, Administrator

Syntax

mode { transport | tunnel }

mode transport

Specifies that the transform set only protects the upper layer protocol data portions of an IP datagram, leaving the IP header information unprotected. Default: Disabled

Important: This mode should only be used if the communications end-point is also the cryptographic end-point.

mode tunnel

Specifies that the transform set protects the entire IP datagram.

This mode should be used if the communications end-point is different from the cryptographic end-point as in a VPN. Default: Enabled

Usage

This command specifies the encapsulation mode for the transform set.

Example

The following command configures the transforms set’s encapsulation mode to transport:

mode transport

 

 

Cisco Systems Inc.

Tel: 408-526-4000

Fax: 408-527-0883