Allied Telesis AR2050V, Справочник по командам, Страница: 2724 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2724
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
SEC
C
OMMANDS
TRANSFORM
(IP
SEC
P
ROFILE
)
transform (IPsec Profile)
Overview Use this command to create an IPsec profile transform, which specifies the
encryption and authentication algorithms used to protect data.
Use the no variant to delete a previously created transform.
Syntax transform < 1-255 > protocol esp integrity {sha1|sha256|sha512}
encryption {3des|aes128|aes192|aes256|null}
no transform < 1-255 >
Default By default, an IPsec profile has no transforms and so will not be active.
Mode IPsec Profile Configuration
Examples To configure an IPsec profile transform, use the following commands:
awplus(config)# crypto ipsec profile my_profile
awplus(config-ipsec-profile)# transform 2 protocol esp
integrity sha1 encryption 3des
To delete a created transform, use the following command:
awplus(config-ipsec-profile)# no transform 2
Related
Commands
crypto ipsec profile
Validation
Commands
show ipsec profile
Parameter Description
< 1-255 >
Transform priority (1 is the highest)
sha1
Secure Hash Standard with 160-bit digest size
sha256
Secure Hash Standard with 256-bit digest size
sha512
Secure Hash Standard with 512 bit digest size
3des
Triple DES symmetric key block cipher with a 168-bit key
aes128
Advanced Encryption Standard symmetric key block cipher with a
128-bit key
aes192
Advanced Encryption Standard symmetric key block cipher with a
192-bit key
aes256
Advanced Encryption Standard symmetric key block cipher with a
256-bit key
null
No encryption. This option is not intended for use in a live network.
It should only be used for testing purposes.