H3C SOHO IE4300, Command Reference Manual

Page: 2287 / 3296

40
ipsec transform-set
Use
ipsec transform-set
to create an IPsec transform set and enter its view, or enter the view
of an existing IPsec transform set.
Use
undo ipsec transform-set
to delete an IPsec transform set.
Syntax
ipsec transform-set transform-set-name
undo ipsec transform-set transform-set-name
Default
No IPsec transform sets exist.
Views
System view
Predefined user roles
network-admin
Parameters
transform-set-name
: Specifies a name for the IPsec transform set, a case-insensitive string of
1 to 63 characters.
Usage guidelines
An IPsec transform set, part of an IPsec policy, defines the security parameters for IPsec SA
negotiation, including the security protocol, encryption algorithms, authentication algorithms, and
encapsulation mode.
Examples
# Create an IPsec transform set named tran1 and enter its view.
<Sysname> system-view
[Sysname] ipsec transform-set tran1
[Sysname-transform-set-tran1]
Related commands
display ipsec transform-set
local-address
Use
local-address
to configure the local IP address for the IPsec tunnel.
Use
undo local-address
to restore the default.
Syntax
local-address { ipv4-address | ipv6 ipv6-address }
undo local-address
Default
The primary IPv4 address of the interface to which the IPsec policy is applied is used as the local
IPv4 address. The first IPv6 address of the interface to which the IPsec policy is applied is used as
the local IPv6 address.
Views
IPsec policy view