SROS Command Line Interface Reference Guide
Crypto Map Manual Command Set
5991-2114
© Copyright 2007 Hewlett-Packard Development Company, L.P.
1249
set transform-set
<setname>
Use the
set transform-set
command to assign a transform set to a crypto map. Use the
no
form of this
command to remove assigned transform sets. Refer to
crypto ipsec transform-set <setname>
on page 350 for information on defining transform sets.
Syntax Description
<setname>
Assigns a transform set to this crypto map by entering the set name.
Default Values
By default, no transform set is assigned to the crypto map.
Functional Notes
Crypto map entries do not directly contain the transform configuration for securing data. Instead, the crypto
map is associated with transform sets which contain specific security algorithms.
If no transform set is configured for a crypto map, then the entry is incomplete and will have no effect on
the system. For manual key crypto maps, only one transform set can be specified.
Usage Examples
The following example first creates a transform set (
Set1
) consisting of two security algorithms (up to three
may be defined), and then assigns the transform set to a crypto map (
Map1
):
ProCurve(config)#
crypto ipsec transform-set Set1 esp-3des esp-sha-hmac
ProCurve(cfg-crypto-trans)#
exit
ProCurve(config)#
crypto map Map1 1 ipsec-manual
ProCurve(config-crypto-map)#
set transform-set Set1