HP Cisco MDS 9120 Cisco MDS 9000 Family Command Reference Guide - Release 4.x - Page 289

Chapter 4 C Commands crypto transform-set domain ipsec Send documentation comments to [email protected] crypto transform-set domain ipsec To create and configure IPsec transform sets, use the crypto transform-set domain ipsec command. To delete an IPsec transform set, use the no form of the command. crypto transform-set domain ipsec set-name {esp-3des | esp-des} [esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac] crypto transform-set domain ipsec set-name esp-aes {128 | 256} [ctr {esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac} | esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac] crypto transform-set domain ipsec set-name{esp-3des | esp-des} [esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac] crypto transform-set domain ipsec set-name esp-aes {128 | 256} [ctr {esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac} | esp-aes-xcbc-mac | esp-md5-hmac | esp-sha1-hmac] Syntax Description set-name esp-3des esp-des esp-aes-xcbc-mac esp-md5-hmac esp-sha1-hmac esp-aes 128 256 ctr Specifies the transform set name. Maximum length is 63 characters. Specifies ESP transform using the 3DES cipher (128 bits). Specifies ESP transform using the DES cipher (56 bits). Specifies ESP transform using AES-XCBC-MAC authentication. Specifies ESP transform using MD5-HMAC authentication. Specifies ESP transform using SHA1-HMAC authentication Specifies ESP transform using the AES cipher (128 or 256 bits). Specifies ESP transform using AES 128-bit cipher. Specifies ESP transform using AES 256-bit cipher. Specifies AES in counter mode. Defaults None. The default mode of AES is CBC (Cyber Block Chaining). Command Modes Configuration mode. Command History Release 2.0(x) Modification This command was introduced. Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command. OL-18089-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Command Reference 4-149