Dell PowerConnect W-7200 Series, Reference Manual

Page: 210 / 1538

210 | crypto ipsec Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
crypto ipsec
crypto ipsec
mtu <max-mtu>
transform-set <transform-set-mtu> esp-3des|esp-aes128|esp-aes128-gcm|esp-aes192|esp-
aes256|esp-aes256-gcm|esp-des esp-md5-hmac|esp-null-hmac|esp-sha-hmac}
Description
This command configures IPsec parameters.
Syntax
Parameter Description
mtu <max-mtu> Configure the IPsec Maximum Transmission Unit (MTU) size.
The supported range is 1024 to 1500 and the default is 1500.
transform-set <transform-set-
mtu>
Create or modify a transform set.
esp-3des
Use ESP with 168-bit 3DES encryption.
esp-aes128 Use ESP with 128-bit AES encryption.
esp-aes128-gcm
Use ESP with 128-bit AES-GCM encryption.
esp-aes192
Use ESP with 192-bit AES encryption.
esp-aes256
Use ESP with 256-bit AES encryption.
esp-aes256-gcm Use ESP with 256-bit AES-GCM encryption.
esp-des
Use ESP with 56-bit DES encryption.
esp-md5-hmac
Use ESP with the MD5 (HMAC variant) authentication algorithm
esp-null-hmac
Use ESP with no authentication. This option is not recommended.
esp-sha-hmac Use ESP with the SHA (HMAC variant) authentication algorithm.
Usage Guidelines
Define the Maximum Transmission Unit (MTU) size allowed for network transmissions using IPsec security, and
create or edit transform sets that define a specific encryption and authentication type.
Example
The following command configures 3DES encryption and MD5 authentication for a transform set named set2 :
(host) (config)# crypto ipsec transform-set set2 esp-3des esp-md5-hmac