Motorola WiNG 4.4, Reference Manual

Page: 426 / 598

6 - 74 WiNG 4.4 Switch System Reference Guide
5. Select an IPSec VPN transform set (by its index) and click the Edit button to modify its properties. For more information,
see Editing an Existing Transform Set on page 6-74 .
6. Select an index and click the Delete button to remove it from the table.
7. If none of the transform sets displayed appear useful, click the Add button to create a new one. For more information,
see Adding a New Transform Set on page 6-75 .
6.7.1.1 Editing an Existing Transform Set
If the attributes of an existing transform set no longer lend themselves useful, consider editing the transform set to be
relevant with the needs of existing VPN peers.
To edit the attributes of an existing transform set:
1. Select Security > IPSec VPN from the main menu tree.
2. Click the Configuration tab.
3. Select an existing transform set and click the Edit button.
4. Revise the following information as required to render the existing transform set useful.
ESP Authentication
Scheme Displays the ESP Authentication Transform used with the index. Options include:
• None - No ESP authentication is used with the transform set.
• MD5-HMAC - AH with the MD5 (HMAC variant) authentication algorithm.
• SHA-HMAC - AH with the SHA (HMAC variant) authentication algorithm.
Mode Displays the current mode used with the transform set. The mode is either tunnel or transport.
Name The name is read-only and cannot be modified unless a new transform set is created.
AH Authentication
Scheme Select the Use AH checkbox (if necessary) to modify the AH Transform Authentication scheme.
Options include:
• None - No AH authentication is used.
• AH-MD5-HMAC - AH with the MD5 (HMAC variant) authentication algorithm.
• AH-SHA-HMAC - AH with the SHA (HMAC variant) authentication algorithm.