HP Cisco MDS 9216A Cisco MDS 9000 Family Command Reference Guide - Release 4.x - Page 290

crypto transform-set domain ipsec Chapter 4 C Commands Send documentation comments to [email protected] You can use this command to modify existing IPsec transform sets. If you change a transform set definition, the change is only applied to crypto map entries that reference the transform set. The change is not applied to existing security associations, but used in subsequent negotiations to establish new security associations. If you want the new settings to take effect sooner, you can clear all or part of the security association database using the clear crypto sa domain ipsec command. Examples The following example shows how to configure an IPsec transform set: switch# config terminal switch(config)# crypto transform-set domain ipsec Set1 esp-aes 128 Related Commands Command clear crypto sa domain ipsec crypto ipsec enable show crypto transform-set domain ipsec Description Clears security associations. Enables IPsec. Displays IPsec crypto transform set information. 4-150 Cisco MDS 9000 Family Command Reference OL-18089-01, Cisco MDS NX-OS Release 4.x