跳转至主要内容

Dell PowerEdge FN I/O Module Command Line Reference Guide 9.10(0.0)

PDF

crypto ipsec transform-set

Create a transform set, or combination of security algorithms and protocols, of cryptos.

Syntax

crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | esp-authentication {md5|sha1|null} | esp-encryption {3des|cbc|des|null}}

To delete a transform set, use the no crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | esp-authentication {md5|sha1|null} | esp-encryption {3des|cbc|des|null}} command.

Parameters

name	Enter the name for the transform set.
ah-authentication	Enter the keywords `ah-authentication` then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic. md5 — Use Message Digest 5 (MD5) authentication. sha1 — Use Secure Hash Algorithm 1 (SHA-1) authentication. null — Causes an encryption policy configured for the area to not be inherited on the interface.
esp-authentication	Enter the keywords `esp-authentication` then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic. md5 — Use Message Digest 5 (MD5) authentication. sha1 — Use Secure Hash Algorithm 1 (SHA-1) authentication. null — Causes an encryption policy configured for the area to not be inherited on the interface.
esp-encryption	Enter the keywords `esp-encryption` then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic. 3des — Use 3DES encryption. cbc — Use CDC encryption. des — Use DES encryption. null — Causes an encryption policy configured for the area to not be inherited on the interface.

Defaults

none

Command Modes

CONFIGURATION

Supported Modes

Full–Switch

Command History

Version	Description
9.9(0.0)	Introduced on the FN IOM.
9.2(0.0)	Introduced on the MXL 10/40GbE Switch IO Module.

Usage Information

Both sides of the link must specify the same transform set.
You can create up to 64 transform sets.

Example

Dell(conf)#int ten 0/4
                                             Dell(conf-if-te-0/4)#ipv6 address 200:1::/64 eui64
                                             Dell(conf)#int ten 0/6
                                             Dell(conf-if-te-0/6)#ipv6 address 801:10::/64 eui64