Руководство По Устранению Ошибки для Cisco Cisco Packet Data Gateway (PDG)
Context Configuration Mode Commands
crypto ipsec transform-set ▀
Cisco ASR 5000 Series Command Line Interface Reference ▄
OL-22948-01
crypto ipsec transform-set
Configures transform-sets on the system and enters the Crypto Trans Configuration Mode.
Product
PDSN, PDIF, HA, GGSN, SCM
Privilege
Security Administrator, Administrator
Syntax
Removes a previously configured transform set
Configures the name by which the transform set will be recognized by the system.
transform_name must be from 1 to 127 alpha and/or numeric characters and is case sensitive.
transform_name must be from 1 to 127 alpha and/or numeric characters and is case sensitive.
Configures the Authentication Header (AH) hash message authentication codes (HMAC) parameter for the
transform set to one of the following:
transform set to one of the following:
md5-96: Message Digest 5 truncated to 96 bits
none: Disables the use of the AH protocol for the transform set.
sha1-96: Secure Hash Algorithm-1 truncated to 96 bits
Configures the Encapsulating Security Payload (ESP) hash message authentication codes (HMAC) parameter
for the transform set to one of the following:
for the transform set to one of the following:
md5-96: Message Digest 5 truncated to 96 bits
none: Disables the use of the AH protocol for the transform set.
sha1-96: Secure Hash Algorithm-1 truncated to 96 bits
If ESP is enabled, this option must be used to set the encapsulation cipher protocol to one of the following:
3des-cbc: Triple Data Encryption Standard (3DES) in chain block (CBC) mode
aes-cbc: Advanced Encryption Standard (AES) in CBC mode
des-cbc: DES in CBC mode