
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
4-150
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco MDS NX-OS Release 4.x
Chapter 4 C Commands
crypto transform-set domain ipsec
You can use this command to modify existing IPsec transform sets. If you change a transform set
definition, the change is only applied to crypto map entries that reference the transform set. The change
is not applied to existing security associations, but used in subsequent negotiations to establish new
security associations. If you want the new settings to take effect sooner, you can clear all or part of the
security association database using the
clear crypto sa domain ipsec
command.
Examples
The following example shows how to configure an IPsec transform set:
switch#
config terminal
switch(config)#
crypto transform-set domain ipsec Set1 esp-aes 128
Related Commands
Command
Description
clear crypto sa domain ipsec
Clears security associations.
crypto ipsec enable
Enables IPsec.
show crypto transform-set
domain ipsec
Displays IPsec crypto transform set information.