Cisco Systems OL-6426-02 Benutzerhandbuch

A transform set represents a certain combination of security protocols and algorithms. During IKE 
negotiation, the peers agree to use a particular transform set for protecting data flow. 

During IKE negotiations, the peers search in multiple transform sets for a transform that is the same at 
both peers. When such a transform set is found, it is selected and applied to the protected traffic as a part 
of both peers’ configurations. 

Perform these steps to specify the IPSec transform set and protocols, beginning in global configuration 
mode:

aaa authorization {network | exec | commands 
level | reverse-access | configuration} {default | 
list-name} [method1 [method2...]]

Router(config)# aaa authorization network 

Router(config)# 

Specifies AAA authorization of all 
network-related service requests, including PPP, 
and the method used to do so.

This example uses a local authorization database. 
You could also use a RADIUS server for this. See 
the

the

 for 

details.

username name {nopassword | password 
password | password encryption-type 
encrypted-password}

Router(config)# username Cisco password 0 

Router(config)# 

Establishes a username-based authentication 
system.

This example implements a username of Cisco 
with an encrypted password of Cisco.

crypto ipsec transform-set transform-set-name 
transform1 [transform2] [transform3] 
[transform4]

Router(config)# crypto ipsec transform-set 

Router(config)# 

Defines a transform set—An acceptable 
combination of IPSec security protocols and 
algorithms.

See the 

for detail about the valid transforms and 
combinations.

crypto ipsec security-association lifetime 
{seconds seconds | kilobytes kilobytes}

Router(config)# crypto ipsec 

Router(config)# 

Specifies global lifetime values used when 
negotiating IPSec security associations.

See the 

for details.